Network Security EngineerOverviewThe Network Security Engineer plays a critical role in ensuring the stability, performance, and security of the enterprise network. This position is responsible for designing, implementing, and maintaining secure, high-availability network infrastructure, while proactively identifying risks and driving continuous improvement across network and security systems.
Essential Duties and Responsibilities- Administer, maintain, and support enterprise network infrastructure, including firewalls, switches, routers, wireless access points, and related networking equipment
- Design, implement, and optimize network configurations to ensure high availability, performance, and reliability
- Provide advanced Layer 2 and Layer 3 troubleshooting and support, including BGP and other dynamic routing technologies
- Monitor network health and performance, proactively identifying and resolving issues
- Perform network upgrades, firmware updates, and hardware replacements as needed
- Maintain network documentation, diagrams, configurations, and standard operating procedures.
- Analyze vulnerability scan results and coordinate remediation efforts for network devices and security appliances
- Apply security patches, firmware updates, and configuration changes to mitigate identified risks
- Configure, manage, and maintain enterprise firewall platforms and security policies
- Implement and administer network security controls, including DNS filtering, application control, web filtering, intrusion prevention, and related security technologies
- Ensure compliance with security standards, policies, and best practices
- Create and maintain comprehensive documentation for all IT services and related processes
- Perform system administrator activities when needed
Job Requirements- Bachelor's Degree in computer science or related demonstrated experience
- 5+ years of experience managing enterprise network infrastructure
- Strong knowledge of TCP/IP, VLANs, routing, switching, DNS, DHCP, VPNs, and wireless networking
- Experience managing enterprise firewall platforms and security policies
- Knowledge of network security principles, segmentation, access control, and threat mitigation.
- Experience with DNS filtering, application control, and related security technologies
- Experience with vulnerability management and remediation processes
- Industry certifications such as CCNA, CCNP, Fortinet NSE, Palo Alto PCNSA/PCNSE, CISSP, Security+, or equivalent preferred
- Experience with network monitoring and security monitoring tools preferred
- Experience with BGP and dynamic routing protocols preferred
