Lead Network Security Engineer - Palo Alto

Labcorp is seeking a Lead Network Security Engineer - Palo Alto to join our team at our Durham, NC location!

Location: Durham, NC.

Applicants who live within 35 miles of Durham, NC location will follow a hybrid schedule. This schedule includes a minimum of three in office days per week at an assigned location supporting both collaboration and flexibility.

Work Schedule: This is a full-time, exempt (salaried) position assigned to a First Shift schedule, with standard business hours of Monday through Friday, 8:00 a.m. to 5:00 p.m. EST.

Business needs may occasionally require flexibility in work hours, including earlier, later, or additional hours, with reasonable notice provided when possible.

Job Responsibilities

• Design, implement, and manage secure network security architectures for large-scale enterprise environments.
• Develop and maintain security policies and procedures aligned to regulatory and organizational requirements.
• Provide expert-level configuration, optimization, and operational support for Palo Alto and Cisco Firepower firewall platforms.
• Troubleshoot complex network security issues across firewall, network, and remote-access solutions.
• Review, implement, and manage firewall rules through enterprise ticketing systems in accordance with security best practices.
• Support PCI, SOC, and similar compliance audits and security assessments.
• Partner with cross-functional teams to integrate network security solutions into existing infrastructure.
• Support enterprise remote-access technologies including VPN platforms.
• Lead or support major initiatives such as firewall platform migrations, enterprise VPN deployments, acquired-site integrations, and network security automation.
• Develop and maintain documentation for network architecture, security controls, policies, and procedures.

• Bachelor's degree in Engineering, Computer Science, Information Technology, Information Assurance, or Networking; or an Associate's degree with 4 or more years of Network experience; or a high school diploma with 10 or more years of Network experience.
• 10 or more years of experience in network security engineering with a focus on firewall technologies.
• 5 or more years of hands-on experience designing, implementing, and managing Palo Alto Firewall environments.
• 3 or more years of hands-on experience designing, implementing, and managing Cisco Firepower platforms.
• 10 or more years of experience with core networking protocols including TCP/IP, DNS, DHCP, and VPN technologies.

• PCNSE (Palo Alto Networks Certified Network Security Engineer) certification.
• CCNP Security or CCIE Security certification.
• 5 or more years of experience working with security frameworks such as the NIST Cybersecurity Framework or ISO 27001.

• Ability to participate in on-call rotation and support security events outside standard business hours as needed.
• Familiarity with cloud-based security solutions within AWS, Azure, or Google Cloud.
• Experience supporting firewall automation and network security tooling.
• Strong documentation and communication skills supporting technical and non-technical stakeholders.
• Ability to lead complex technical initiatives such as platform migrations and enterprise capability rollouts.

• Designed and supported HA / cluster architectures

• Large-scale Panorama environments