Network Security Engineer - Palo Alto

Invenergy is North America’s largest privately held developer, owner, and operator of power infrastructure. With 25 years of trusted execution, we deliver reliable, affordable energy through a diverse portfolio that includes natural gas, solar, land-based wind, energy storage, transmission, and domestic manufacturing. Headquartered in Chicago, we develop, own, and operate large scale projects that power communities and support the energy future.

Invenergy follows a hybrid schedule, working in office Monday through Thursday and remotely on Fridays if work permits.

This position will be open for application for at least 3 calendar days from the posting date. This position will remain open for application based on business need, which may be before or after the 3-day posting window.

Position Overview

Invenergy is seeking a Network Security Engineer (Palo Alto) to join our Technology Solutions team. In this role, you will design, implement, and support our enterprise network infrastructure—ensuring reliability, security, and NERC CIP compliance. The ideal candidate has hands-on experience with Cisco, Palo Alto Firewalls, and Aruba Wireless products. A solid understanding of NERC CIP, scripting, and AI tool fundamentals is a plus.

Responsibilities

• Design, configure, and maintain enterprise LAN/WAN networks using Cisco routers, switches, and wireless solutions.
• Deploy, manage, and troubleshoot Palo Alto Networks firewalls, VPNs, and security policies.
• Implement, and support Aruba wireless access, including controllers, access points, and network access control ClearPass policy management.
• Monitor network health and performance; identify bottlenecks and implement optimizations.
• Ensure network compliance with NERC CIP requirements through documentation, audits, and control implementations.
• Collaborate with cross-functional teams on project delivery, change management, and incident response.
• Experience with data center and local network support and design.
• Develop and maintain network diagrams, runbooks, and standard operating procedures.
• Design, build, and maintain python, powershell, and bash scripts to automate repeated network configuration tasks.
• Participate in a 24×7 on-call rotation to provide critical support.

Minimum Qualifications

• Bachelor’s degree in Computer Science and Information Technology.
• 3+ years of network engineering experience in an enterprise environment.
• Proficiency configuring and troubleshooting Cisco routers, switches.
• Demonstrate working knowledge of layer 2 / 3 network designs.
• Experience implementing and managing wireless access points or industry equivalent (i.e. Palo Alto, Cisco, Aruba controllers, APs).
• Strong problem-solving skills and attention to detail.
• Excellent verbal and written communication skills.
• Some travel required.
• Eligible to work in the United States without the need for employer visa sponsorship now or in the future.

​Preferred Qualifications

• Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP).
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• Aruba Certified Mobility Associate (ACMA) or Aruba Certified ClearPass Professional (ACCP).
• Formal training or certification in NERC CIP compliance.
• Working knowledge of NERC CIP standards and their application to critical infrastructure and/or formal training or certification in NERC CIP compliance.
• Experience in the energy, utilities, or critical infrastructure sectors.
• Scripting skills (Python, Ansible, etc.) for network automation.
• Familiarity and experience with using AI tools such as Claude Code, Chat GPT Codex, Microsoft Copilot, and self-hosted inference to build and interact with network solutions.
• Familiarity with network monitoring and management tools (SolarWinds, Nagios, Monitor Logic, etc.).
• Experience with cloud networking services (Virtual Networks, ExpressRoute, VWAN, VPN Gateways, Network Security Groups, Azure / AWS).

#LI-HYBRID

$88,000.00 - $118,000.00 USD Annual
Bonus: 20% - 30%

The base pay range reflects the minimum and maximum target salary for the position. Invenergy considers a number of factors when determining base pay offers such as the scope and responsibilities of the position and the candidate's experience, education and skills.

In addition to base pay, the total annual compensation package may also include eligibility to participate in our bonus program(s) which are designed to reward individual and company performance. Your recruiter can share more about bonus eligibility for this position during the hiring process.

Invenergy offers a variety of other benefits including medical, dental and vision insurance, 401k, paid time off, etc.

Invenergy LLC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or disability.