New York, NY

Salary
$101,494–$160,000from the description
Posted
Jul 5, 2026
Location
New York, NY
Last confirmed open
Jul 20, 2026

What this job asks for AI summary

A senior-level network security engineering role focused on designing, deploying, and maintaining VPN infrastructure — primarily Palo Alto Global Protect and F5 APM — alongside broader enterprise firewall and network security management. Day-to-day work spans vulnerability assessments, incident response, security monitoring, and policy enforcement across a multi-vendor environment including Fortinet, Forescout, and Gigamon. Suits an experienced network security engineer with deep VPN and firewall expertise.

Senior level · 7+ years · New York-Newark-Jersey City, NY-NJ-PA · Bachelor's required · Full-time

Must have (6)
Palo Alto NetworksGlobalProtect VPNF5 BIG-IPF5 APMIDS/IPSVPN
Nice to have (9)
Fortinet FortiGateForescoutGigamonRADIUSLDAPSAMLMFAPCNSEF5-CTS

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What the occupation pays Median $143,559 (middle half $110,181–$179,574). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (6)

The role sits at the intersection of network engineering and information security; 15-1212 (Information Security Analysts) was chosen as primary because the JD emphasizes security posture, incident response, vulnerability assessments, and policy enforcement, but 15-1244 (Network and Computer Systems Administrators) is a credible runner-up given the heavy VPN/firewall operations content.

The minimum qualifications gate on 7+ years of experience and a BA/BS degree. The specific technology experience figures (5+ years Palo Alto, 3+ years F5 BIG-IP, etc.) all appear under the 'Preferred Qualifications' heading and are therefore marked as preferred, not required.

Palo Alto GlobalProtect VPN and F5 APM/BIG-IP are called out explicitly in the position summary as core to the role ('deep expertise'), supporting their treatment as hard gates despite the specific year counts appearing under Preferred.

Fortinet FortiGate, Forescout, Gigamon, authentication protocols (RADIUS, LDAP, SAML, MFA), PCNSE certification, and F5-CTS certification all appear exclusively under the Preferred Qualifications section.

The salary range ($101,493.51–$160,000 annually) is disclosed per New York State salary transparency law; actual pay depends on experience, specialty, education, and hospital need.

Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Firewall management.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗