" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eMid/Snr Network Security Engineer - 6mos contract - view to extend\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"10256\"\u003e Information \u0026amp; Communication Technology \u003c/li\u003e \u003cli data-id=\"10257\"\u003e Engineering - Network \u003c/li\u003e \u003cli data-id=\"10258\"\u003e New South Wales \u003c/li\u003e \u003cli data-id=\"10260\"\u003e Sydney \u003c/li\u003e \u003cli data-id=\"10259\"\u003e Full Time \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 29/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cdiv class=\"description\"\u003e \u003cstrong\u003eThe Role\u003cbr\u003e\u003c/strong\u003e\u003cbr\u003e Results-driven \u003cstrong\u003eNetwork Security Engineer\u003c/strong\u003e specializing in modernizing enterprise security architectures through large-scale cloud proxy and SASE migrations. Recognized for bridging legacy on-premises web gateways to cloud-native security platforms like \u003cstrong\u003eZscaler (ZIA/ZPA)\u003c/strong\u003e, while maintaining robust next-generation firewall engineering, deep packet troubleshooting, and strict ITIL-aligned change management.\u003cbr\u003e \u003cbr\u003e\u003cstrong\u003eKey Responsibilities\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003eMigration Strategy \u0026amp; Execution:\u003c/strong\u003e Architected and executed seamless end-to-end migrations from legacy secure web gateways (SWG) to cloud security service edge (SSE) platforms, managing policy analysis, translation, and phased site-by-site cutovers.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003ePolicy Transformation:\u003c/strong\u003e Audited, re-engineered, and optimized legacy web policies\u0026mdash;including URL categorization, deep packet SSL/TLS inspection, authentication frameworks, and bypass rules\u0026mdash;into modern cloud-native access controls.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eFirewall \u0026amp; Traffic Steering Engineering:\u003c/strong\u003e Configured and maintained enterprise firewalls (PAN-OS, Panorama, and GlobalProtect) to orchestrate secure traffic steering to cloud security platforms via dynamic \u003cstrong\u003eGRE/IPsec tunnels\u003c/strong\u003e, automated \u003cstrong\u003ePAC files\u003c/strong\u003e, and endpoint client connectors.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eComplex Diagnostics \u0026amp; Root Cause Analysis:\u003c/strong\u003e Performed advanced troubleshooting across multi-vendor environments using deep packet analysis (Wireshark, tcpdump), SIEM log correlation, and real-time traffic flow tracing to resolve latency, authentication, and SSL inspection friction.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eITIL Change \u0026amp; Incident Governance:\u003c/strong\u003e Managed lifecycle operations within \u003cstrong\u003eServiceNow\u003c/strong\u003e, authoring high-risk change requests, comprehensive backout plans, and presenting technical risk profiles in Change Advisory Board (CAB) forums.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eDocumentation \u0026amp; Cross-Functional Leadership:\u003c/strong\u003e Authored detailed operational runbooks, migration run-sheets, and as-built architectural diagrams, facilitating coordination across identity, endpoint, and networking teams while delivering status updates to executive project leadership.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eRequired Qualifications\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003e5+ years\u003c/strong\u003e of dedicated experience in enterprise network security engineering.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eAdvanced Palo Alto Expertise:\u003c/strong\u003e Extensive hands-on experience deploying and managing PAN-OS, Panorama, and GlobalProtect security ecosystems.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eITIL Change Management Maturity:\u003c/strong\u003e Proven track record of planning, risk-assessing, and executing infrastructure changes within ServiceNow in high-availability enterprise environments.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eAdvanced Diagnostics:\u003c/strong\u003e Deep technical proficiency in packet capture analysis, log parsing, traffic flow troubleshooting, and structured root-cause investigation.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eCore Networking \u0026amp; Security Fundamentals:\u003c/strong\u003e Comprehensive mastery of TCP/IP, dynamic routing, DNS architecture, Public Key Infrastructure (PKI), forward proxy concepts, and SSL/TLS interception mechanics.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eCommunication \u0026amp; Collaboration:\u003c/strong\u003e Excellent written, presentation, and interpersonal skills capable of bridging technical engineering groups with business leadership.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003ePreferred Qualifications\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003eCloud Security Specialization:\u003c/strong\u003e Hands-on experience with \u003cstrong\u003eZscaler ZIA/ZPA\u003c/strong\u003e, SASE/SSE architecture design, and Zero Trust Network Access (ZTNA) principles.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eIdentity \u0026amp; Access Management:\u003c/strong\u003e Experience integrating SAML/SSO frameworks with cloud identity providers (e.g., Azure AD / Entra ID).\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eAutomation \u0026amp; Scripting:\u003c/strong\u003e Proficiency in Python, infrastructure-as-code (Terraform), or leveraging security platform APIs for automation.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eProfessional Certifications:\u003c/strong\u003e PCNSE, Zscaler Certifications (ZCCA/ZDTA), and ITIL Foundation.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eTools and Technologies\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003eNetwork \u0026amp; Security:\u003c/strong\u003e Palo Alto Networks (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Legacy Web Gateways / Proxy architectures.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eOperations \u0026amp; ITSM:\u003c/strong\u003e ServiceNow (Change, Incident, Problem Modules).\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eTroubleshooting \u0026amp; Monitoring:\u003c/strong\u003e Wireshark, tcpdump, Splunk (or equivalent SIEM platforms).\u003c/li\u003e \u003c/ul\u003e If you\u0027re interested, share your resume to \u003cstrong\u003eEllie Ardeza\u003c/strong\u003e at \u003cstrong\u003eellie@nbridge.com.au\u003c/strong\u003e or hit apply.\u0026nbsp;\u0026nbsp; \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4482266\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "