Cybersecurity Engineer

Overview

Kimley-Horn is seeking a Cybersecurity Engineer to help lead and mature our network security function, with a primary focus on enterprise firewall architecture and operations.

This is a foundational role within our Information Security team, where you’ll take ownership of a growing firewall environment, influence security strategy, and help define the future of network security across a rapidly expanding, multi-site organization.

If you have a strong networking background and deep hands‑on firewall experience—especially in Palo Alto environments—this is an opportunity to truly own and evolve a critical security domain.

This is not a remote position. Applicants must be legally authorized to work for Kimley-Horn in the U.S. without employer sponsorship. We do not typically sponsor H1-B or other work visa petitions.

Responsibilities

• Serve as the primary owner of Kimley-Horn’s enterprise firewall environment, including design, implementation, and ongoing optimization.
• Create, review, and maintain firewall policies and rules across on‑prem and cloud environments.
• Lead firewall strategy decisions , including policy standardization, segmentation, and performance tuning.
• Administer and optimize Palo Alto firewalls and Panorama .
• Manage and enhance GlobalProtect policies and secure remote access configurations .
• Analyze and implement ACLs, rule bases, and logical security controls across a multi‑vendor environment.
• Drive continuous improvement in firewall posture, balancing security and user experience .
• Support and manage Next‑Gen Firewalls in Azure environments .
• Administer and optimize Web Application Firewalls (WAFs) .
• Participate in SASE and cloud security architecture discussions and reviews .
• Implement and maintain network security controls , including firewalls, VPNs, IDS/IPS, and access controls.
• Troubleshoot complex networking and security issues across cloud and hybrid environments.
• Monitor and resolve network performance issues (latency, throughput, utilization, system slowness).
• Partner with Network Operations and Cloud teams to review designs and provide a security‑first perspective .
• Assist in evaluating and implementing Network Detection & Response (NDR) solutions .
• Support the transition and ongoing ownership of Cisco ISE capabilities .
• Contribute to security tooling decisions, standards, and long‑term strategy .
• Coordinate and guide work across matrixed IT partners .
• Provide technical guidance, training, and mentorship on network security best practices.
• Participate in incident response, change management, and after‑hours maintenance for critical events.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, or a related field.
• 4+ years of experience in network security engineering or related roles within enterprise environments .
• Strong hands‑on experience with firewall design, implementation, and management (required).
• Direct experience with Palo Alto firewalls and Panorama .
• Experience with firewall architectures across internal, perimeter, and cloud environments .
• Experience administering Web Application Firewalls (WAFs) .
• Experience with Cisco ISE or similar identity‑based network access platforms.
• Solid understanding of networking fundamentals (routing, switching, TCP/IP, DNS, DHCP).
• Experience with change management practices and operational processes .
• Strong problem‑solving skills and ability to perform under pressure.
• Excellent communication skills with the ability to explain technical concepts to non‑technical stakeholders.

Preferred Certifications

• Security+
• Network+
• CCNP Security
• AZ-700/AZ-500
• CISSP
• or similar

Benefits

• Exceptional Retirement Plan: 2-to-1 company match on up to 4% of eligible compensation (salary + bonus) and additional profit‑sharing contribution.
• Comprehensive Health Coverage: Low‑cost medical, dental, and vision insurance options.
• Time Off: Personal leave, flexible scheduling, floating holidays, and half‑day Fridays.
• Financial Wellness: Student loan matching in our 401(k), and performance‑based bonuses.
• Professional Development: Tuition reimbursement and extensive internal training programs.
• Family‑Friendly Benefits: New Parent Leave, family building benefits, and childcare resources.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities