<div class="content-intro"><p>GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.</p></div><p><strong>General Description</strong></p> <p>We are looking for a skilled Sr. Security Engineer to deliver multi-pillar network security engagements, with a primary focus on Security Architecture & Advisory, Network Security & Firewall, and delivery across SASE/SSE. This role will engage in the independent delivery of complex, cross-pillar solutions from architecture and design through pre-sales scoping and implementation while providing “Wow Them” service to clients and internal stakeholders.</p> <p>The Sr. Security Engineer will be required to demonstrate strong technical and consultative skills, led by influence, and apply sound business and financial acumen to drive repeatable, margin-conscious delivery that aligns engagements with practice objectives and lifecycle progression (Assess → Architect → Implement → Optimize → Operate → Expand).</p> <p><strong>About the Network Security Practice</strong></p> <p>The Network Security Practice is responsible for helping clients navigate the complex threat and cybersecurity solution landscape so they can make informed risk decisions at the speed of business. We assess, architect, implement, optimize, and operate network security solutions across the organization and our client base.</p> <p>Our team of security engineers, architects, and advisors is organized around five market-facing pillars. As the practice scales, each pillar is supported by a dedicated sub-team, with engineers cross-trained to support adjacent pillars:</p> <ul> <li>Network Security & Firewall: next-generation firewalls, IPS/IDS, email security, content filtering, high-availability clustering, and firewall policy management.</li> <li>SASE/SSE (Secure Access & Cloud Edge): SASE/SSE, ZTNA, SWG, CASB, SD-WAN security overlay, VPN-to-ZTNA migration, and branch security posture.</li> <li>Network Access & Segmentation: NAC, 802.1X, microsegmentation, OT/IoT segmentation, identity-based access, and Zero Trust architecture.</li> <li>Network Detection & Response (NDR): NDR platforms, network visibility and analytics, traffic aggregation, breach-and-attack simulation, and threat hunting.</li> <li>Security Architecture & Advisory: architecture reviews, risk assessments, technology evaluations, security roadmaps, and vendor-neutral advisory.</li> </ul> <p><strong>Roles and Responsibilities</strong>:</p> <p>This Sr. Security Engineer role is prioritized across three pillars in order of focus: Security Architecture & Advisory first, Network Security & Firewall second, and SASE/SSE third — while remaining cross-trained to support adjacent pillars as practice sub-teams mature.</p> <ul> <li>Lead architecture-level design and advisory engagements including security architecture reviews, Zero Trust strategy, and vendor-neutral roadmaps translating client requirements into defensible solution designs and serving as the practice’s senior advisory presence (Security Architecture & Advisory).</li> <li>Conduct assessments, architecture reviews, and technology evaluations that produce risk findings and prioritized security roadmaps, identifying natural next engagements across the lifecycle (Security Architecture & Advisory).</li> <li>Independently deliver firewall and perimeter engagements end to end design, configure, and deploy next-generation firewall and secure-infrastructure solutions on Palo Alto Networks and Fortinet platforms, owning technical quality (Network Security & Firewall).</li> <li>Lead firewall policy optimization, migration, and lifecycle engagements, applying delivery standards that protect margin and quality (Network Security & Firewall).</li> <li>Support secure access and cloud-edge solutions SASE/SSE, ZTNA, and VPN-to-ZTNA migrations for distributed and remote-work environments as a secondary delivery focus (SASE/SSE).</li> <li>Provide pre-sales technical leadership: lead scoping of engagements, define assumptions, level of effort, deliverables, and acceptance criteria to protect margin and prevent scope creep.</li> <li>Serve as a senior technical point of contact on assigned engagements; mentor and cross-train Associate and mid-level Security Engineers as pillar sub-team’s form.</li> <li>Enforce delivery discipline: adhere to practice playbooks, change-control, and project-health standards, and escalate delivery blockers immediately.</li> <li>Maintain a target 80% billable utilization while investing the remaining 20% in enablement, certifications, pre-sales and scoping support, and practice development.</li> </ul> <p><strong>Required Experience and Education:</strong></p> <ul> <li>5–8 years of progressive experience in network security engineering and consulting, with demonstrated independent, multi-pillar delivery.</li> <li>Deep, hands-on expertise with Palo Alto Networks and Fortinet platforms (firewall/NGFW design, configuration, and deployment) the practice’s primary delivery need.</li> <li>Demonstrated ability to lead security architecture and advisory engagements, including risk assessments, roadmaps, and technology evaluations.<