Network Security Engineer

Job Description

Job Description

Network Security Engineer

Engineer Secure, Resilient Network Services That Support Mission-Critical Operations

Georgia System Operations Corporation (GSOC) is seeking a Network Security Engineer to design, implement, secure, and operate corporate network services and cybersecurity tools that enable reliable, protected business operations.

This hands-on role combines enterprise network engineering and cybersecurity expertise across datacenter, campus, remote-site, internet-edge, and approved cloud environments. The Network Security Engineer helps safeguard availability, performance, secure access, and security visibility while advancing resilient, supportable, and automated network and security services.

This opportunity is ideal for an experienced network and security professional who enjoys solving complex technical problems, strengthening controls, supporting incident response, mentoring peers, and collaborating across infrastructure, cybersecurity, application, service desk, and vendor teams.

This is an onsite position and it is not eligible for visa sponsorship

What You'll Do

As a Network Security Engineer, you will engineer and support the network and network-focused security services that connect and protect enterprise users, systems, and sites.

You will:

• Design, deploy, and support datacenter and campus switching, routing, VLANs, VRFs, high availability, capacity planning, and network segmentation.
• Administer next-generation firewalls, security zones, NAT, threat-prevention services, firewall policy lifecycle, and least-privilege access controls.
• Engineer WAN, internet-edge, remote-site, remote-access VPN, and site-to-site VPN connectivity, including integrations with identity, MFA, and device-trust services.
• Design and support corporate and guest wireless, controllers, access points, RF performance, 802.1X, network access control, device profiling, and secure authentication.
• Configure load balancers, virtual servers, pools, health monitors, persistence, TLS termination, and high-availability services.
• Manage the network-facing certificate lifecycle and PKI integrations.
• Engineer and operate secure web and DNS controls, network detection and response, security logging, SIEM integrations, and security-control health monitoring.
• Partner with the Security Operations Center on alert tuning, investigations, evidence gathering, and operational security use cases.
• Support secure DNS, DHCP, and IP address management and maintain telemetry, flow data, logging, alerting, packet analysis, and service dashboards.
• Maintain secure configuration baselines, backups, firmware and software lifecycle, and remediation of network-device and security-tool vulnerabilities.
• Automate repeatable work using APIs, scripting, and infrastructure-as-code practices.
• Develop and test network and security-platform recovery and failover capabilities.
• Prepare change and rollback plans and provide incident escalation, containment support, root-cause analysis, and vendor coordination.

This role also:

• Works independently within established standards and change processes.
• Provides technical leadership for projects and mentors peers.
• Participates in technology evaluations, proof-of-concepts, cross-functional initiatives, backup support, and knowledge transfer.

What You Bring

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.
• Ideally 5+ years of progressive experience supporting enterprise network and network-security infrastructure, including switching, routing, firewall administration, VPN, wireless, and troubleshooting.
• Strong knowledge of enterprise LAN/WAN, datacenter switching, routing, firewalls, VPN, wireless, NAC, load balancing, PKI and certificates, DNS, DHCP, IPAM, and secure configuration management.
• Hands-on experience operating cybersecurity tooling such as secure web and DNS services, network detection and response, vulnerability management, SIEM and logging integrations, and security monitoring.
• Experience with network and security automation using Python, PowerShell, Ansible, Terraform, APIs, or comparable tools.
• Working knowledge of NIST CSF, CIS Controls, incident-response practices, and applicable regulatory or industry requirements, including NERC CIP where relevant to the IT environment.
• Strong analytical, troubleshooting, documentation, communication, collaboration, and customer-service skills.
•  

Preferred Qualifications

Enterprise Network Engineering

• Experience engineering highly available datacenter, campus, WAN, internet-edge, remote-site, wireless, and VPN services.