Network Security Engineer

Job Description This contract Network Security Engineer role focuses on operating and enhancing enterprise network security services in a hybrid environment. You will administer next-generation firewalls, network access control, and remote access VPNs, while contributing to strategic projects such as 802.1X expansion and network segmentation. The position combines day-to-day operational support with scoped project work in a regulated or safety-critical setting.

Responsibilities Administer and maintain next-generation firewall and unified threat management platforms, including policy changes, rule lifecycle management and cleanup, signature and software updates, and license and certificate renewals.

Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling to ensure appropriate access and protection.

Administer IDS/IPS platforms by tuning signatures, reducing false positives, and escalating confirmed detections to the security operations team.

Support 802.1X network access control on a day-to-day basis, including supplicant and authentication troubleshooting, resolving certificate and policy issues, and onboarding new device types.

Support enterprise remote access VPN services, including client troubleshooting, split-tunnel and access policy changes, and capacity and availability monitoring.

Work assigned tickets in the queue within agreed service-level agreements, providing clear and timely written updates to requesters.

Author and submit change requests with complete test plans and rollback steps, following formal change management processes.

Create and maintain runbooks, network diagrams, and configuration documentation for all supported systems to ensure consistent operations and knowledge sharing.

Participate in an on-call or escalation rotation as agreed, providing support for critical incidents and after-hours issues.

Design, pilot, and execute phased rollout of 802.1X expansion to additional sites and device classes, including creation of handoff documentation.

Contribute to network segmentation and SSL decryption enforcement initiatives, including policy design and enforcement activities.

Deliver scoped project work defined by written statements of work, meeting documented acceptance criteria and target completion dates.

Essential Skills5+ years of network security engineering experience supporting production environments.
5+ years of IT systems or application engineering and administration experience.

Strong working knowledge of all layers of the OSI model.

Hands-on experience with Layer-7 protection techniques, including application control, TLS inspection, intrusion prevention systems, URL filtering, and DNS filtering.

Direct experience administering enterprise next-generation firewall and unified threat management platforms, including vendors such as Palo Alto and Fortinet.

Experience implementing and supporting 802.1X wired and wireless network access control, including platforms such as Aruba Clear Pass.

Experience with enterprise remote access VPN solutions.

Demonstrated experience operating within a formal change management process.

Clear written and verbal communication skills, with the ability to work effectively across Information Security, IT, Product, and Operations teams.

Relevant security certifications such as PCNSE, Security+, or CISSP.Scripting or automation experience for configuration and reporting using tools such as Python, Ansible, or Terraform.

Experience working in a regulated or safety-critical environment.

Experience with cloud and AWS security concepts and tools.

Additional

Skills and Qualifications

Experience with Palo Alto and Fortinet next-generation firewalls.

Experience with Aruba and Clear Pass for network access control.

Familiarity with AWS security services and controls.

Hands-on experience with Security+ certification topics and Terraform-based infrastructure automation.

Ability to document runbooks, network diagrams, and configuration standards in a clear and maintainable way.

Comfort working in hybrid teams and collaborating with multiple technical and non-technical stakeholders.

Strong problem-solving skills and a methodical approach to troubleshooting complex network security issues.

Work Environment This is a hybrid role based in Foster City, California, with an expectation to work onsite three days per week. You will operate in an enterprise environment that leverages next-generation firewalls, IDS/IPS, 802.1X network access control, remote access…