Network Security Engineer II (L2)

Black Birch Technology Group is seeking an experienced Network Security Operations Engineer II (L2) to support enterprise network and security infrastructure for a global client environment.

This position is responsible for advanced network troubleshooting, security incident investigation, firewall administration, network access control, and resolution of complex incidents escalated from Level I engineers.

The ideal candidate possesses strong enterprise networking fundamentals, hands-on experience with Palo Alto Networks and related security technologies, and the ability to independently diagnose technical issues, perform root cause analysis, and implement approved corrective actions.

The L2 Engineer will also serve as a technical escalation point and subject matter expert (SME), providing guidance to Level I engineers while ensuring service availability, security, and compliance with established SLAs.

Requirements

1. Advanced Network Troubleshooting

• Troubleshoot complex LAN, WAN, VPN, and data center connectivity issues across enterprise environments.
  

• Diagnose Layer 2–7 network issues involving routing, switching, VLANs, DNS, DHCP, NAT, and TCP/IP.
  

• Investigate packet loss, latency, asymmetric routing, and application connectivity failures.
  

• Analyze network traffic and packet captures using Wireshark, tcpdump, and network CLI tools.
  

• Perform root cause analysis and implement approved corrective actions.
  

2. Firewall & Network Security Operations

• Support and troubleshoot Palo Alto next-generation firewalls and Panorama.
  

• Investigate firewall security policies, NAT rules, App-ID behavior, blocked traffic, and connectivity issues.
  

• Analyze firewall traffic, threat, and system logs to identify operational and security concerns.
  

• Support approved firewall configuration changes, high availability, and failover troubleshooting.
  

• Assist with troubleshooting Gigamon network visibility and traffic monitoring solutions.
  

3. Security Threat Investigation

• Investigate security alerts, abnormal network behavior, and suspicious traffic using Darktrace or comparable detection platforms.
  

• Correlate security telemetry across firewalls, monitoring tools, and network infrastructure.
  

• Identify potential indicators of compromise, unauthorized connections, and suspicious network activity.
  

• Recommend containment and remediation actions in accordance with established incident response procedures.
  

• Escalate confirmed or complex security incidents to appropriate security teams.
  

4. Network Access Control (NAC)

• Troubleshoot Forescout network access control, device visibility, and endpoint compliance issues.
  

• Investigate 802.1X authentication, RADIUS, MAC Authentication Bypass, and device classification problems.
  

• Diagnose VLAN assignments, network segmentation, and access enforcement policies.
  

• Coordinate remediation activities with infrastructure and security teams.
  

5. Incident Management & Technical Escalations

• Independently investigate and resolve Level II network and security incidents.
  

• Support Priority 1 and Priority 2 incidents according to established escalation and SLA procedures.
  

• Manage incidents, service requests, and approved changes through ServiceNow or comparable ITSM platforms.
  

• Coordinate with client technical teams, Level III engineers, and vendor support when necessary.
  

• Provide technical guidance and escalation assistance to Level I engineers.
  

• Maintain detailed troubleshooting records, root cause analysis, knowledge base articles, and shift handover documentation.
  

Required Qualifications

• 5+ years of relevant experience preferred, with a strong background in enterprise networking, network security operations, or infrastructure support.
  

• Strong understanding of TCP/IP, routing, switching, subnetting, VLANs, DNS, DHCP, NAT, and VPN technologies.
  

• Demonstrated experience troubleshooting complex enterprise LAN, WAN, and network security environments.
  

• Hands-on experience supporting and troubleshooting Palo Alto firewalls, including security policies, traffic analysis, and NAT.
  

• Working knowledge of Panorama for centralized firewall management.
  

• Familiarity with Gigamon, Forescout, Darktrace, or comparable network visibility, access control, and security monitoring technologies.
  

• Experience analyzing packet captures and network traffic using Wireshark, tcpdump, or similar tools.
  

• Understanding of network segmentation, threat detection, security incident response, and root cause analysis.
  

• Experience managing incidents and changes through ServiceNow or comparable ITSM platforms.
  

• Ability to independently investigate complex technical issues, prioritize incidents, and coordinate escalations.
  

• Understanding of infrastructure dependencies across Windows/Linux systems, cloud environments, applications, and network connectivity.
  

• Strong analytical, troubleshooting, documentation, and communication skills.
  

• Advanced English proficiency for communication with U.S.-based clients and international technical teams.
  

• Availability to support operational shifts and weekend on-call rotations as required.
  

Preferred Qualifications

• Previous experience in a Network Operations Center (NOC), Security Operations Center (SOC), or Managed Services Provider (MSP) environment.
  

• Experience supporting large-scale or global enterprise network infrastructures.
  

• Subject matter expertise in one or more networking or security domains.
  

• Experience with firewall high availability, network monitoring, threat investigation, and security policy management.
  

• Familiarity with ITIL-based incident, problem, and change management processes.
  

Preferred Certifications

• Cisco CCNA, CCNP, or equivalent.
  

• Palo Alto Networks certifications.
  

• CompTIA Security+.
  

• Other relevant networking, infrastructure, or cybersecurity certifications.
  

• 
  
  

Benefits

Competitive salary package.

• Paid sick days.
  

• Private health insurance.
  

• Christmas bonus.
  

• Performance-based incentives.
  

• Continuous training and professional development.
  

• Opportunities to pursue industry-recognized technical certifications.
  

• Career advancement within a growing international technology organization.
  

• Hybrid work opportunities based on operational and client requirements.
  

• Direct collaboration with U.S.-based clients and global technical teams.
  

• Exposure to enterprise networking, cybersecurity, and advanced security technologies.
  

• Supportive work environment focused on employee development and well-being.
  

At Black Birch Technology Group, we connect skilled IT professionals with challenging opportunities across international technology environments.

If you are passionate about enterprise networking, cybersecurity, and solving complex technical challenges, we want to hear from you.

Apply today and take the next step in your network security career with Black Birch Technology Group.