Network Security Engineer

About This Role

This Network Security Engineer will be responsible for designing, implementing, and maintaining secure network infrastructures, protecting the organization's data, applications, and services. The role involves developing security policies, monitoring threats, responding to incidents, and ensuring compliance with industry standards.

Responsibilities

• Architect, deploy, and maintain security infrastructure including firewalls, VPNs, IDS/IPS, NAC, and segmentation technologies
• Design secure network topologies, including DMZs, Zero-Trust zones, and micro-segmentation
• Implement and support security features on enterprise switches, routers, and wireless solutions
• Manage next-generation firewalls (Palo Alto, Cisco Firepower, FortiGate, Check Point)
• Configure rule sets, security profiles, threat prevention, URL filtering, SSL decryption, and VPN tunnels
• Monitor network and security logs using SIEM/SOAR tools (e.g., Splunk, Sentinel, Cortex XSIAM)
• Perform vulnerability assessments for network devices and applications
• Develop and maintain security policies, standards, and procedures
• Ensure compliance with regulatory frameworks (NIST, ISO 27001, CIS, PCI-DSS, NERC-CIP, IEC-62443)
• Provide Tier-3 support for escalated network & network security issues

Requirements

• 3-7 years of hands-on experience in network security engineering
• Strong understanding of TCP/IP, routing/switching, VLANs, VPNs, and Layer 2/3 protocols
• Expertise in one or more firewall platforms (Palo Alto, Cisco ASA/Firepower, Fortinet, Check Point)
• Experience with IDS/IPS, NAC (Cisco ISE, Aruba ClearPass), and network segmentation
• Proficiency with SIEM tools, packet analysis, and log analysis
• Solid understanding of security frameworks (NIST CSF, CIS Controls) and regulatory standards

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field (or equivalent experience)
• 3-7 years of hands-on experience in network security engineering

Nice to Have

• Experience in Cloud security: AWS, Azure, GCP
• OT/ICS security (ISA/IEC-62443, Purdue Model)
• Automation & scripting: Python, Ansible, Terraform
• SD-WAN and SASE / ZTNA 2.0 platforms architectures
• Strata Cloud Manager / AIOps
• Checkpoint Harmony Access deployments
• Knowledge of EDR/XDR platforms and SOAR automation

Skills

* Required skills

Benefits

Certifications