Network Security Engineer

Network Security Engineer

Designing, implementing, and managing network security solutions to protect enterprise infrastructure and data

Position Overview
We are seeking an experienced Network Security Engineer with core expertise in securing network infrastructures through VPNs, Next-Generation Firewalls (NGFW), Secure Access Service Edge (SASE), and network segmentation techniques. The role involves deploying and maintaining security controls that safeguard enterprise assets against evolving cyber threats.

You will collaborate with IT, security operations, and architecture teams to design and enforce robust network security policies and configurations.

Key Responsibilities

Network Security Design & Implementation

• Deploy and manage Virtual Private Networks (VPNs) to ensure secure remote and site-to-site connectivity
• Configure and maintain Next-Generation Firewalls (NGFW) for advanced threat protection and traffic inspection
• Implement Secure Access Service Edge (SASE) frameworks to secure cloud and remote access environments
• Design and enforce network segmentation and micro-segmentation strategies to limit attack surfaces

Monitoring & Incident Response

• Monitor network traffic for security anomalies using intrusion detection/prevention systems (IDS/IPS)
• Respond to and investigate network security incidents and vulnerabilities
• Collaborate with Security Operations Center (SOC) teams to enhance detection and mitigation capabilities

Policy & Compliance

• Develop and maintain network security policies, standards, and procedures
• Ensure network security architecture aligns with organizational risk management and compliance requirements
• Perform security assessments and audits on network infrastructure components

Required Qualifications

• 6+ years experience in network security engineering or a related cybersecurity role
• Hands-on experience with VPN technologies (IPSec, SSL VPN) and Next-Generation Firewalls (e.g., Palo Alto, Fortinet, Cisco)
• Knowledge of Secure Access Service Edge (SASE) concepts and implementations
• Experience designing and implementing network segmentation and micro-segmentation
• Familiarity with network protocols, routing, switching, and security monitoring tools

Preferred Qualifications

• Relevant certifications such as CISSP, CCNP Security, Palo Alto PCNSE, or Cisco CCIE Security
• Experience with cloud network security and hybrid architectures
• Knowledge of Zero Trust security models and implementations
• Proficiency in scripting or automation for security policy management
• Strong analytical and problem-solving skills