Network Security Engineer

Kimley-Horn, one of Fortune Magazine’s “100 Best Companies to Work For,” is looking for a Network Security Engineer to join the Information Security team in our Phoenix, AZ office. As a member of Kimley-Horn’s Information Security team, you will play a critical role in ensuring the security of our organization's network infrastructure.  

This is not a remote position. 

• Participate in advanced security policy decisions including firewall and SASE logic reviews to improve user experience and security posture
• Partner with vendors and internal partners to design and optimize network security solutions 
• Implement and maintain robust network security measures, including firewalls, VPNs and intrusion detection/prevention systems 
• Troubleshoot complex cloud infrastructure issues involving networking and security. 
• Create, review, and maintain firewall rules across multiple environments. 
• Collaborate with Network Operations and Cloud teams to provide technical guidance and support. 
• Monitor, analyze, and resolve network performance issues, including utilization, throughput, latency, and system slowness. 
• Analyze, plan, and implement access control lists (ACL), firewall policies, and other logical security controls in a multi-vendor security stack 
• Reviewing, updating, and managing Web Application Firewalls 
• Participate in system upgrades and enhancements 
• Provide guidance and training to staff on network security 
• Support after-hours maintenance for outages and critical upgrades 

• Bachelor’s degree in information security, cybersecurity, or a related field 

• 4+ years of experience in Network Security or a similar role within an enterprise-level organization 

• Professional IT certifications relating to IT Security or Networking, such as Security+/Network+, CCNP Security, AZ-700/AZ-500, Certified Information Systems Security Professional (CISSP), or other relevant security certifications.  

• Experience with application-based traffic and firewall design (internal/perimeter/external) 

• Hands on experience with administrating Palo Alto firewalls and Panorama  

• Experience managing and troubleshooting Web Application Firewalls 

• Hands on experience with Cisco ISE 

• Excellent problem-solving skills and the ability to think critically under pressure 
• Experience with change-management policies and procedures 
• Strong communication skills, both written and verbal, with the ability to convey complex technical concepts to non-technical stakeholders

Desired Skills: 

• Strong knowledge of Threat Protection, URL filtering, TLS decryption, and PCAPS 

• Familiarity with cloud network security concepts and best practices for securing cloud environments (AWS, Azure). 

• Knowledge of core network services (DNS, DHCP, IP Routing)  

• Knowledge of web standards relating to APIs (OAuth, SSL, CORS, JWT, etc.) 

• Strong problem-solving skills with the ability to troubleshoot complex cloud networking infrastructure  

• Proven experience with SD-WAN platforms and technologies 

• Knowledge of the MITRE ATT&CK framework or NIST Cyber Security Framework (CSF) 

Applicants must be legally authorized to work for Kimley-Horn in the U.S. without employer sponsorship. We do not typically sponsor H1-B or any other work visa petitions.