Pursue Purpose

Network Security Engineer

We are seeking a highly skilled Network Security Engineer to join our team. The ideal candidate will play a pivotal role in designing, installing, and maintaining secure network infrastructures. This position ensures stable, scalable, redundant, and secure 24/7 network operations by proactively assessing requirements, implementing solutions, and optimizing security frameworks. Project length is expected to go for at least 12+ months.

Key Responsibilities:

• Network Design & Implementation:
  Plan, coordinate, and install secure network systems to meet organizational needs.
• Security & Risk Assessment:
  Perform in-depth assessments and provide secure networking solutions to mitigate risks.
• Firewall & Threat Management:
  Configure, monitor, and troubleshoot next-generation firewall services, IDS/IPS, and content filtering solutions.
• Migration & Optimization:
  Lead or assist in transitioning legacy security platforms to modern defense-in-depth architectures.
• Troubleshooting & Incident Response:
  Support engineers in remediating critical network security threats.
• Documentation & Reporting:
  Develop comprehensive design documents, operational guidelines, and weekly status reports.
• Collaboration & Leadership:
  Guide and coordinate team activities to ensure efficient troubleshooting and secure network operations.

Required Qualifications:

Required

Education:

• Associate degree in an Information Technology (IT)-related field.

Required

Certifications:

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Cisco Certified Network Professional (CCNP) (Enterprise or Security)

Preferred Qualifications:

• Experience:
  
  10+ years of technical IT networking and security experience.
• Education:
  
  Bachelor's degree in an IT-related field.

Preferred Advanced

Certifications:

• Prisma Certified Cloud Security Engineer (PCCSE) (Palo Alto Networks)
• Cisco Certified Internetwork Expert (CCIE) (Enterprise Infrastructure or Security)

Technical Skills & Expertise:
Firewalls & Security:

• Palo Alto next-gen firewalls, Intrusion Detection/Prevention, Content Filtering
• Virtual Private Networks (VPNs), Data Loss Prevention, TLS/SSL Inspection

Network Infrastructure:

• Cisco Systems (routing, switching, wireless), A10 Networks (reverse proxies, load balancing)
• Network Access Control (Cisco Client, Free Radius, ACLs)

Cloud & Authentication:

• Multifactor authentication integration (Microsoft), Cloud networking/security
• Scalable routing protocols (EIGRP, OSPF, BGP), 802.1x authentication

Security Analysis & Vulnerability Management:

• Nessus, NMAP, Wireshark, Opnet, Riverbed
• Certificate Management, PKI, Micro-segmentation

Tools & Management:

• Panorama, Solar Winds, Windows/Linux/Unix security, centralized monitoring

Soft Skills:

• Ability to work independently and mentor junior associates.
• Strong technical documentation and communication skills.
• Effective presentation and collaborative problem-solving abilities.

Work Arrangement:

• Work shall be performed in a hybrid setting each week, Monday through Friday, as follows:
  Two days remote at a suitable off-site location. The client reserves the right to determine that an off-site location is unsuitable (e.g., crowded public space with distracting background noise during meetings).
• Three days on site in Annapolis, MD 21401.
• Perform during normal operating hours, Monday through Friday, 8:00 AM to 4:30 PM Eastern Standard Time (EDT).
• The candidate shall be flexible in extending coverage hours or scheduling to meet deadlines, project requirements, and/or on-call operational support, including evenings, nights, weekends, and holidays.