Network​/Security Engineer

Network/Security Engineer

The Network Engineer supports a disaster recovery and virtualization strategy engagement by assessing network infrastructure, connectivity, firewall architecture, segmentation, and recovery dependencies. This role documents current-state findings, identifies risks and gaps, and helps develop practical recommendations, DR playbook inputs, and roadmap actions. The role is focused on assessment and planning; it does not include production network changes or live failover execution unless separately approved.

• Assess and document network architecture, connectivity, resiliency, and disaster recovery dependencies.
• Review routing, switching, WAN, VPN, DNS, DHCP, IP addressing, bandwidth, and inter-site connectivity considerations.
• Support discovery of virtualization, cloud, and hybrid network connectivity across VMware, Azure, OCI, and related environments.
• Assist with firewall and security architecture reviews, including segmentation, security zones, remote access, Zero Trust readiness, and monitoring integration.
• Identify network risks, failover constraints, operational gaps, and recovery limitations that could impact disaster recovery readiness.
• Document network paths, routing dependencies, firewall dependencies, and connectivity requirements that affect application and infrastructure recovery sequencing.
• Support development of target-state recommendations for secure recovery, segmentation, isolation, hybrid connectivity, and geographic resiliency.
• Contribute to DR testing and validation planning, including test scenarios, success criteria, failback considerations, reporting inputs, and remediation tracking.
• Help prepare network-related inputs for DR playbooks, recovery runbooks, escalation matrices, communication plans, and cyber recovery planning.
• Work with network, infrastructure, cloud, cybersecurity, application, and OT stakeholders to gather information and validate findings.
• Prepare clear documentation of findings, risks, assumptions, constraints, and recommendations for project deliverables and leadership review.

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Network Engineering, or related field; equivalent experience may be considered.
• 5-7 years of experience in network engineering, network security, firewall administration, infrastructure support, or similar enterprise technology roles.
• Working knowledge of TCP/IP, DNS, DHCP, VPNs, routing, switching, WAN connectivity, IP addressing, segmentation, and troubleshooting.
• Experience supporting or assessing enterprise firewall platforms such as Palo Alto, Fortinet, Cisco, Check Point, or comparable technologies.
• Understanding of enterprise network architecture, including core/distribution/access layers, inter-site connectivity, resiliency, and failover design.
• Basic understanding of disaster recovery concepts such as RTO, RPO, dependency mapping, recovery sequencing, failover/failback, and DR testing.
• Ability to support assessments, stakeholder interviews, discovery sessions, data collection, and documentation reviews.
• Strong analytical, troubleshooting, written communication, and collaboration skills.

• Experience with hybrid cloud networking, including Azure and OCI connectivity concepts, cloud routing, and landing zone connectivity.
• Exposure to VMware virtual networking, software-defined networking, overlay/underlay design, micro-segmentation, and traffic flow analysis.
• Familiarity with OT network considerations, IT/OT segmentation, SCADA dependency awareness, and regulated operational environments.
• Experience supporting or documenting DR, backup, replication, cyber recovery, failover, validation, or recovery testing processes.
• Familiarity with Zero Trust architecture, privileged access, encryption, audit evidence, and security monitoring integration.
• Basic scripting or automation exposure using Python, Power Shell, Bash, Infrastructure-as-Code, or network automation tools.
• Relevant certifications such as CompTIA Network+, Security+, CCNA, Palo Alto, Fortinet, Cisco, VMware, Microsoft Azure, or similar credentials.

• Network…