Network Engineer

We have an outstanding Contract position for aNetwork Engineerto join a leading Company located in theHuntsville, ALsurrounding area.

• US Citizenship is required.
• Candidates must possess an Active Secret Security Clearance.
• We are seeking a Prisma Access Network Engineer to design, implement, and operate Palo Alto Prisma Access and GlobalProtect connectivity, as well as Prisma Browser for secure remote user and branch connectivity.

This role blends network engineering with platform operations, focusing on scalable architecture, strong security controls, and high availability. The engineer will partner with identity, endpoint, cloud, and network teams to deliver secure access outcomes.

Responsibilities :

+ Architect, deploy, and enhance Prisma Access for Remote Users and Remote Networks, including onboarding new locations and user population + Design connectivity and routing: IPsec, BGP (Border Gateway Protocol), SD-WAN integrations (as applicable), and traffic steering to on-prem and cloud workloads + Define and implement security controls: security policies, URL filtering, threat prevention, DNS security, and TLS/SSL decryption (where approved/required) + Integrate identity and device posture: SAML/SSO, MFA, certificate-based auth, and GlobalProtect configuration standards + Build and maintain operational readiness: monitoring, logging, alerting, dashboards, runbooks, and automation for repeatable changes + Lead change delivery: technical design, implementation plans, testing/validation, rollback strategy, and stakeholder communications + Drive continuous improvement via root cause analysis, performance tuning, and lifecycle management (upgrades, configuration hygiene, standards) + Serve as an escalation point for complex incidents and support an on-call rotation as required

Basic Hiring Criteria :

+ Minimum 4 years in network/security engineering with hands-on delivery responsibility in enterprise environments + Demonstrated experience implementing/supporting Prisma Access and/or GlobalProtect, plus Palo Alto platform experience (e.g., Panorama, PA-Series + Strong fundamentals in TCP/IP, DNS, PKI/certificates, VPN/IPsec, and routing (BGP) + Experience with enterprise change management and documentation (e.g., ServiceNow; design docs, MOPs/runbooks) + Strong communication skills, translating technical decisions into risk, impact, and options for stakeholders

Desired Qualifications :

+ Palo Alto certifications: PCNSA (preferred) and PCNSE (highly preferred) + Identity integrations: Azure Active Directory (Azure AD) / Okta, conditional access, device compliance/posture +

Logging/monitoring:

Splunk (or similar), Prisma Access logging, packet capture analysis, and performance troubleshooting + Experience with cloud networking patterns (AWS/Azure) and hybrid connectivity to data centers Military connected talent encouraged to apply. VEVRAA Federal Contractor / Request Priority Protected Veteran Referrals / Equal Opportunity Employer / Veterans / Disabled To read our Candidate Privacy Information Statement, which explains how we will use your information, please visithttp://www.tadpgs.

com/candidate-privacy/orhttps:

//pdsdefense.com/candidate-privacy/ The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable: + The California Fair Chance Act + Los Angeles City Fair Chance Ordinance + Los Angeles County Fair Chance Ordinance for Employers + San Francisco Fair Chance Ordinance