Helper Cipher Jobs (NOW HIRING)

About the Role 

The Network Engineer is responsible for designing, managing, and securing our enterprise network infrastructure. This is a hands-on role serving as the primary technical owner of our network stack spanning Palo Alto firewalls, F5 load balancers, DNS, NGINX reverse proxies, and Ubiquiti-based office networking, ensuring high availability, performance, and security across our data center, cloud, and office environments.

This role works closely with cloud engineering, security, and application teams to deliver a reliable, well-segmented network fabric that supports our business operations and compliance obligations including SOC 2 and HIPAA.

What You'll Do 

Firewall & Perimeter Security

• Administer and maintain Palo Alto Networks firewalls (PA-Series, VM-Series) and Panorama for centralized policy management
• Design and enforce security policy rulesets, NAT policies, application-based controls, and URL filtering using PAN-OS
• Manage GlobalProtect VPN for remote access, including gateway configuration, split tunneling, and MFA integration
• Configure and maintain IPsec VPN tunnels for site-to-site connectivity with data centers and cloud environments
• Operate and tune Palo Alto HA pairs, monitor threat logs, and respond to firewall-identified incidents
• Stay current on PAN-OS releases, evaluate CVEs, and manage firmware upgrade cycles in coordination with the security team

Load Balancing & Traffic Management 

•  Administer F5 BIG-IP LTM for application load balancing, SSL/TLS offload, and traffic steering across server pools
• Configure and maintain virtual servers, pool members, health monitors, iRules, and persistence profiles
• Manage SSL certificate lifecycle on F5, including certificate installation, renewal, and cipher suite hardening
• Collaborate with application teams to optimize traffic policies, implement session persistence, and troubleshoot application delivery issues

Office Networking 

•  Deploy, configure, and manage Ubiquiti UniFi switching, wireless access points, and security gateways across office locations
• Administer UniFi Network Application / UniFi OS for centralized device management, VLAN segmentation, and SSID configuration
• Design and maintain office network architecture including inter-VLAN routing, QoS policies, and guest network isolation
• Support office expansions, equipment refreshes, and new site bring-ups including cabling coordination and wireless site surveys
• Troubleshoot connectivity, throughput, and roaming issues across distributed office environments 

Network Security

• Implement and maintain network segmentation strategies using VLANs, micro-segmentation, and firewall zones
• Support zero-trust network access (ZTNA) initiatives and enforce least-privilege access at the network layer
• Manage network access control (NAC) and 802.1X authentication for wired and wireless endpoints
• Conduct periodic network security reviews, firewall rule audits, and access path analysis
• Support SOC 2 and HIPAA compliance obligations through network-level controls, evidence collection, and audit support
• Collaborate with the security team on threat detection, network traffic analysis, and incident containment

Monitoring, Documentation & Operations

• Implement and maintain network monitoring using SNMP, NetFlow, syslog, and dashboarding tools
• Maintain accurate and up-to-date network topology diagrams, IP address management (IPAM), and runbooks
• Drive continuous improvement initiatives including capacity planning, redundancy reviews, 
  and technology refresh cycles

What You'll Need 

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field; equivalent experience or relevant industry certifications will also be considered
• 3+ years of hands-on network engineering experience in an enterprise or multi-site environment
• Proficiency with Palo Alto Networks firewalls and PAN-OS including policy management, NAT, VPN, and HA configuration Network Engineer
• Experience administering F5 BIG-IP LTM including virtual servers, iRules, SSL offload, and health monitors
• Solid DNS fundamentals including zone management, split-horizon, record types, and hybrid DNS troubleshooting
• Hands-on NGINX experience for reverse proxying, TLS termination, and upstream load balancing
• Experience deploying and managing Ubiquiti UniFi environments across multiple sites
• Thorough understanding of core networking protocols including TCP/IP, BGP, OSPF, VLAN/802.1Q, STP, and LACP
• Familiarity with network security principles including segmentation, ACLs, NAC, 802.1X, and zero-trust concepts
• Experience with packet capture and analysis tools (Wireshark, tcpdump) for troubleshooting
• Ability to read and write basic automation scripts (Python, Bash) for network tasks

Nice to Have 

• Healthcare, SaaS, or regulated-industry experience
• Palo Alto Networks certifications (PCNSA, PCNSE)
• F5 certifications (F5-CA, F5 201/301)
• CCNA, CCNP, or equivalent vendor-neutral networking certifications
• Exposure to network automation and IaC tooling including Ansible and Terraform (network providers)
• Experience with Azure networking including VNets, VPN Gateway, ExpressRoute, Azure Firewall, and Private Endpoints
• Background in regulated environments (SOC 2, HIPAA, PCI-DSS) and evidence-based compliance support
• Experience with SIEM integration for network log forwarding and correlation (Microsoft Sentinel, Rapid7)

Travel Requirements 

• This role requires up to 5% travel, which may include client meetings, team gatherings, or company events
• Travel will typically be scheduled in advance and supported by the company