About the role

WWT is looking for a Senior Security Engineer specialising in Network Security to join the team in Sydney on a 6-month contract, with potential for extension. This is a project delivery role rather than a day-to-day operations position. The primary focus is designing firewall deployments, optimising firewall policies, and leading firewall migrations for WWT clients, alongside hands-on delivery of Cisco ISE network access control projects. You'll represent WWT directly with client teams, working alongside WWT's Domain Architects to deliver secure, resilient outcomes across multi-site environments.

Key responsibilities

Lead the end-to-end lifecycle of Palo Alto firewall and Cisco ISE deployments and migrations, including assessment, design, implementation, testing and validation.

Perform firewall policy optimisation, upgrades and cross-vendor migrations while minimising operational risk and service disruption.

Validate implemented solutions through structured testing as part of the standard change process, ensuring compliance with security, quality and operational standards.

Help develop network segmentation strategy, and support secure VPN and remote access design.

Engage directly with customers to gather requirements and provide technical consultation, owning detailed design and hands-on implementation, and presenting design decisions and recommendations directly to stakeholders.

Produce handover and knowledge transfer documentation at project milestones and when engagements close.

Ramp up quickly across different client environments and toolsets, working closely with security, network and vendor teams to keep delivery secure by design.

Essential

Excellent written and verbal communication skills, backed by previous experience in a client-facing consulting or professional services role, with the confidence to lead client design discussions independently.

Deep, hands-on expertise in Palo Alto Firewalls, including Panorama, App-ID and threat prevention.

Strong hands-on expertise in Cisco ISE, including 802.1X and TrustSec policy enforcement.

Ability to design and implement network segmentation, VPN and secure remote access solutions.

Proven experience delivering enterprise network projects end-to-end, within complex, large-scale environments, with the ability to ramp up quickly in unfamiliar client settings.

Strong troubleshooting and problem-solving skills, backed by clear technical documentation, including handover and knowledge transfer materials.

Ability to work collaboratively with engineering teams and project stakeholders.

Willingness to undergo background checks before starting the contract.

Highly Desirable

Familiarity working within data centre network and firewall environments.

Multi-vendor firewall experience beyond Palo Alto, such as Cisco FTD/FMC or Fortinet FortiGate, including experience migrating firewall policies between vendor platforms.

Broader network engineering depth, including Cisco or Juniper routing and switching, OSPF/BGP, and wireless network security, as supporting infrastructure knowledge.

8 or more years of network security engineering experience, ideally backed by a vendor certification such as CCNP Security, CCIE Security or PCNSE.

Strong automation and scripting skills (Python, Bash, Ansible) for streamlining firewall and network security tasks.