Network Security Engineer

Role Overview:

We are looking for a Network Security Engineer to be responsible for the design, implementation, maintenance, and continuous improvement of network security solutions. You will lead network security posture management, system operations, perimeter defense controls, compliance activities, and automation initiatives to protect critical infrastructure.

To be successful in this role, you should have solid experience in information security and network infrastructure, with a strong understanding of security protocols, firewalls, VPNs, and risk management. You should also possess strong interpersonal and communication skills and be able to collaborate effectively with a wide variety of stakeholders.

Primary Responsibilities:

Network Security Posture & Firmware Patching

• Lead monthly patching cycles for network security devices and firmware
• Automate patch deployment where possible (e.g., via Ansible or vendor tools)
• Perform configuration hardening audits and remediate posture drifts
• Report posture metrics and status to leadership

Management and Maintenance of Network Security Systems

• Monitor system health and performance of network security platforms
• Perform regular backups and disaster recovery testing
• Manage device groups, templates, and stacks
• Push policy changes safely and tune logging and reporting
• Automate repetitive operational tasks

Perimeter Defense & Network Security Controls Implementation

• Design and configure firewalls, VPNs, Network Access Control (NAC), and segmentation policies
• Conduct pre- and post-implementation testing
• Integrate security controls with monitoring and SIEM tools

Compliance, Auditing & Security Hardening

• Achieve and maintain compliance with relevant standards (e.g., ISO 27001, NIST, PCI-DSS network controls) during annual and internal audits
• Remediate all audit findings within defined SLAs
• Ensure ≥95% of network devices meet baseline hardening standards

Knowledge Sharing, Automation & Professional Development

• Automate repetitive tasks using Python, Ansible, Panorama API, or other tools
• Pursue relevant professional certifications and stay current with emerging threats and technologies
• Share threat intelligence, findings, and best practices with the broader security team

Requirements:

• A bachelor's or associate's degree in IT, Computer Science, or a related field
• 5–10 years experience in information security and IT risk management, with a strong focus on network security
• IT security or risk assessment certifications are advantageous (e.g., CISSP, CCNP Security, PCNSA/PCNSE, or equivalent)
• Hands-on experience managing firewalls, VPNs, and network security appliances
• Advanced understanding of security protocols, cryptography, network segmentation, and security architectures
• Strong working knowledge of IT risks, security implementations, and common operating systems
• Experience with automation tools such as Ansible, Python scripting, and vendor APIs is highly desirable
• Excellent problem-solving, communication, teaching, and interpersonal skills