Position Summar
y
The Network Security Engineer is a hands-on technical role responsible for designing, implementing, and operating CDK’s network security controls across on‑premises and cloud environments. This role focuses on next-generation firewalls, network segmentation, secure connectivity, and traffic inspection to protect enterprise and production environments. The Network Security Engineer partners closely with Infrastructure, Cloud, and Security teams to ensure resilient, scalable, and compliant network security aligned with zero trust principles and enterprise risk requirements.
Responsibilities
· Design, implement, and maintain network security architecture across on‑premises and cloud environments
· Engineer, operate, and optimize next-generation firewall platforms, with primary focus on Palo Alto Networks technologies
· Implement and manage network segmentation, security zones, and traffic inspection policies to enforce least-privilege access
· Support secure connectivity solutions including VPNs, site-to-site tunnels, remote access, and hybrid cloud networking
· Partner with Cloud and Infrastructure teams to embed network security controls into cloud-native and hybrid architectures
· Monitor, troubleshoot, and respond to network security events, performance issues, and policy violations
· Develop and maintain firewall rulesets, NAT policies, and routing configurations following security and change standards
Qualifications
· Bachelor’s Degree in Computer Science, Information Technology, or equivalent combination of education and relevant experience
· 5+ years of experience in network and security engineering roles within enterprise environments
· Strong hands-on experience with next-generation firewalls, specifically Palo Alto Networks (e.g., PAN‑OS, Panorama, SCM Pro)
· Experience securing hybrid environments spanning on‑premises data centers and cloud platforms
· Solid understanding of TCP/IP networking, routing, switching, DNS, and load balancing concepts
· Experience with VPN technologies, IPS/IDS, URL filtering, and network threat prevention capabilities
· Working knowledge of cloud networking and security constructs in Azure, AWS, or GCP
· Strong troubleshooting skills and ability to operate in high-availability, mission-critical environments
Preferred Qualifications
· Experience designing network security architectures aligned with zero trust and defense-in-depth principles
· Expertise with Palo Alto features such as App-ID, User-ID, GlobalProtect, and threat prevention profiles
· Experience with cloud-native firewall and cloud security services (e.g., Azure, AWS, GCP)
· Relevant certifications such as PCNSE, CISSP, CCNP Security, or equivalent vendor and industry certifications
…