SME- Network Security Engineer

What success looks like in this role:

About the Role

We are looking for a Senior Network & Security Engineer to design, implement, and support enterprise network security infrastructure across on-premises and multi-cloud environments. This role owns the full lifecycle of secure connectivity, load balancing, and perimeter security — from Cisco ASA VPN and Palo Alto firewall policy to AWS/Azure network security — and plays a key role in threat detection, incident response, and security architecture improvements.

• Creates and updates security architecture diagrams and processes utilizing industry-standard frameworks.
• Develops new security alerts and tooling for automation to detect, respond to, and remediate threats.
• Performs cybersecurity engineering trend analyses and reporting, defining and recommending tool, infrastructure, and other improvements.
• Delivers presentations on the results of analyses and recommendations to key stakeholders.
• Provides assistance during security incidents to implement controls and eradicate cybersecurity threats.
• Performs transitions, implementations, and migrations of network and security infrastructure.
• Proposes and helps review plans and policies to improve the overall security environment.

Cisco ASA

• AnyConnect and Site-to-Site VPN configuration and troubleshooting
• NAT (Network Address Translation) policy design and implementation
• BGP routing configuration and troubleshooting on ASA

F5 BIG-IP Load Balancer

• LTM (Local Traffic Manager) configuration and administration
• SSL/TLS certificate management
• iRules development and configuration

Palo Alto Networks Firewall & Panorama

• Security policy management across Palo Alto firewalls and Panorama
• Advanced troubleshooting of firewall and traffic issues
• IPsec tunnel configuration and troubleshooting

Monitoring & Service Management

• Site24x7 monitoring tools
• ServiceNow knowledge (incident, change, and knowledge management)

Cloud Networking & Security (AWS / Azure)

• Deep working knowledge of AWS and Azure networking and network security
• AWS Application Load Balancer (ALB) configuration and certificate management
• AWS CloudFront and WAF (Web Application Firewall) knowledge

• Cisco CCNP Security (or equivalent ASA/VPN experience)
• F5 Certified Technology Specialist (LTM)
• Palo Alto Networks PCNSE
• AWS Certified Advanced Networking – Specialty or Azure Network Engineer Associate

You will be successful in this role if you have:

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
• 8+ years of hands-on experience in enterprise network and security engineering.
• Strong written and verbal communication skills, with the ability to present findings and recommendations to technical and non-technical stakeholders.
• Proven experience supporting production environments during incident response and change windows, including off-hours support as needed.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.

If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [email protected]. US job seekers can find more information about Unisys’ EEO commitment here.