Senior Network Security Engineer

TL;DR

Senior Network Security Engineer (Palo Alto Firewalls): Secure and operate connectivity across global offices and data centers with an accent on Palo Alto firewall design, deployment, migration, and ongoing optimization of security policies. Focus on advanced troubleshooting using Palo Alto CLI debugging, deep packet/flow/session analysis, and leading incident response and integrations across routing, NAT, and policy enforcement.

Location: Overland Park, Kansas; Kansas City, Missouri; or Chicago, Illinois (4 days in office)

Salary: $119,000-$169,400 base (US locations only)

Company

hirify.global provides market infrastructure and tradable products for global financial markets.

What you will do

• Design, deploy, and migrate Palo Alto firewall solutions, including security policy architecture, segmentation, SSL decryption, and Panorama-based centralized management.
• Lead complex security and network integrations using core networking principles (BGP, OSPF, routing design, failover, traffic engineering) for resilient, high-performance connectivity.
• Partner with network, cloud, and infrastructure teams to implement secure, scalable connectivity across on-prem and hybrid environments.
• Act as a senior escalation point for advanced troubleshooting across firewalls and underlying network infrastructure, including deep packet, flow, and session-level analysis.
• Support network security operations and incident response by diagnosing connectivity issues involving routing, NAT, policy enforcement, and application behavior.
• Mentor engineers and NOC staff and recommend enhancements to security architecture, firewall capabilities, and network design.

Requirements

• 4 days in office in either the Overland Park, KS or Chicago, IL office.
• 7+ years of network and security engineering experience across enterprise routing, switching, and firewall platforms.
• 5+ years hands-on experience managing Palo Alto firewalls (SSL decryption, security profiles, Panorama centralized management).
• Strong experience designing and troubleshooting complex network/security environments using routing protocols (BGP, OSPF), NAT, and packet-level analysis in production.
• Deep understanding of TCP/IP, traffic flows, and structured troubleshooting methodologies.
• Experience leading firewall migrations and contributing to enterprise network security architecture; ability to script or use API-driven automation.

Culture & Benefits

• Generous paid time off (vacation, personal days, sick days, and annual community service days).
• Health, dental, and vision benefits with access to telemedicine and mental health services.
• 2:1 401(k) match up to 8% immediately upon hire, plus discounted Employee Stock Purchase Plan.
• Tax Savings Accounts for health, dependent, and transportation.
• On-site amenities including complimentary lunch/snacks/coffee in Cboe offices and on-site gyms with discounts to other fitness centers.
• Paid tuition assistance, education opportunities, and paid parental leave.

Hiring process

• Interviews focused on technical depth in network security/firewalls and troubleshooting approach.
• Discussions with stakeholders to assess communication, escalation handling, and cross-functional collaboration.