Network Security Engineer

Network Security Engineer Overview

The Network Security Engineer plays a critical role in ensuring the stability, performance, and security of the enterprise network. This position is responsible for designing, implementing, and maintaining secure, high-availability network infrastructure, while proactively identifying risks and driving continuous improvement across network and security systems.

• Administer, maintain, and support enterprise network infrastructure, including firewalls, switches, routers, wireless access points, and related networking equipment
• Design, implement, and optimize network configurations to ensure high availability, performance, and reliability
• Provide advanced Layer 2 and Layer 3 troubleshooting and support, including BGP and other dynamic routing technologies
• Monitor network health and performance, proactively identifying and resolving issues
• Perform network upgrades, firmware updates, and hardware replacements as needed
• Maintain network documentation, diagrams, configurations, and standard operating procedures
• Analyze vulnerability scan results and coordinate remediation efforts for network devices and security appliances
• Apply security patches, firmware updates, and configuration changes to mitigate identified risks
• Configure, manage, and maintain enterprise firewall platforms and security policies
• Implement and administer network security controls, including DNS filtering, application control, web filtering, intrusion prevention, and related security technologies
• Ensure compliance with security standards, policies, and best practices
• Create and maintain comprehensive documentation for all IT services and related processes
• Perform system administrator activities when needed

• Bachelor's Degree in computer science or related demonstrated experience
• 5+ years of experience managing enterprise network infrastructure
• Strong knowledge of TCP/IP, VLANs, routing, switching, DNS, DHCP, VPNs, and wireless networking
• Experience managing enterprise firewall platforms and security policies
• Knowledge of network security principles, segmentation, access control, and threat mitigation
• Experience with DNS filtering, application control, and related security technologies
• Experience with vulnerability management and remediation processes
• Industry certifications such as CCNA, CCNP, Fortinet NSE, Palo Alto PCNSA/PCNSE, CISSP, Security+, or equivalent preferred
• Experience with network monitoring and security monitoring tools preferred
• Experience with BGP and dynamic routing protocols preferred