Senior Network Security Engineer at ZipStaff in Washington, DC

Job Title: Senior Network Security Engineer. Location: Washington, DC (On-site). Employment Type: Contract (W2 through ZipStaff — No C2C or 1099). About the Opportunity: ZipStaff is seeking an experienced Senior Network Security Engineer to serve as a technical leader in designing, implementing, and optimizing perimeter and infrastructure security controls for a major transportation organization. In this high-impact role, you will safeguard critical enterprise infrastructure across on-premises networks and multi-cloud environments (AWS and Microsoft Azure) with a heavy focus on Palo Alto Networks firewalls. You will proactively manage network threats, drive security automation, align controls with regulatory frameworks, and mentor junior engineering staff to strengthen the organization’s overall security posture. What You’ll Do: Lead the design, configuration, rule maintenance, and optimization of enterprise Palo Alto Networks firewalls and associated perimeter security platforms. Maintain and support Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, and Network Access Control (NAC) technologies. Partner with cloud, network, and application teams to implement secure architectures across AWS and Microsoft Azure environments. Analyze and respond to network security incidents, monitor events via SIEM platforms, perform threat hunting, and conduct root-cause forensic investigations. Conduct security reviews and risk assessments for new systems and architectural designs, ensuring compliance with NIST, CIS, PCI-DSS, HIPAA, and ISO standards. Streamline operational security tasks by building automation scripts using Python, PowerShell, or Bash. Develop and maintain operational runbooks, network diagrams, and standard operating procedures to support long-term security strategy. Guide multi-disciplinary project teams throughout the system development lifecycle and provide mentorship to junior security engineers. Participate in planned maintenance windows, after-hours implementations, and emergency incident response activities. Required Qualifications: 11+ years of dedicated cybersecurity engineering experience, with a core focus on enterprise network and firewall security. Advanced, hands-on administration of Palo Alto Networks firewalls in complex enterprise environments. Deep knowledge of TCP/IP, routing, switching, VPNs, WAN/LAN architectures, and perimeter defense concepts. Practical experience managing IDS/IPS, SIEM, EDR, DLP, CASB, and WAF solutions. Direct experience supporting and securing cloud infrastructure within AWS and Microsoft Azure environments. Proficiency in scripting and automating security workflows using Python, PowerShell, or Bash. Solid understanding of industry frameworks and standards, including NIST, CIS Controls, PCI-DSS, HIPAA, and ISO 27001. Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field. Exceptional problem-solving abilities, strong written and verbal communication, and proven stakeholder management skills. Ability to work on-site in Washington, DC. Preferred Qualifications: Master’s degree in Cybersecurity, IT, or a related field. Active industry certifications such as PCNSE, CISSP, CCNP Security, GIAC, CEH, or Security+. Background working directly with or within a Security Operations Center (SOC). Experience implementing Zero Trust security architectures and cloud-native security tools. Prior experience supporting network security in transportation, operations-focused, or large distributed enterprise environments. Benefits: Health Insurance. Dental Insurance. Vision Insurance. 401(k) + 401(k) matching. Paid time off. Referral Program. About ZipStaff: ZipStaff partners with leading organizations to connect skilled technology professionals with high-impact contract opportunities. We focus on quality matches, clear communication, and long-term success for candidates and clients. To apply, submit your resume highlighting your 11+ years of network security engineering experience, hands-on Palo Alto Networks firewall administration, AWS/Azure cloud security, and automation scripting. Pure research or junior experience will not be considered.