M365 Security Architect

Job Title Network Security Engineer (Hybrid Onsite)

Location Moorestown, NJ

Duration 15 Months+

Interview Type Virtual / In-Person

Note Hybrid Onsite: 3 days a week Locals Only

This role serves within the client's identity and access management organization and is responsible for executing and advancing the security posture of the client's core network platforms & devices (e.g., CMTS/vCMTS, routers, etc.) through secure architecture, vulnerability remediation, software patch validation, configuration compliance, secure access control enforcement, and vendor-driven hardening initiatives. The role will partner with network architecture, engineering, compliance, operations, and vendor teams to reduce risk exposure, and ensure the network platforms are resilient and aligned to the client's cybersecurity standards.

Skills & Qualifications:

• 7+ years of experience in network security engineering within large enterprise, telecommunications, ISP, cable, cloud, or service provider environments.
• Experience securing carrier-grade network infrastructure supporting large-scale production environments.
• Experience with automation and scripting using Python, Ansible, PowerShell, Terraform, or similar tools.
• Hands-on experience with network hardening methodologies aligned to CIS Benchmarks, NIST, CISA guidance, or vendor security best practices.
• Experience with network compliance, vulnerability scanning, and reporting platforms.
• Knowledge of Zero Trust, secure-by-design principles, privileged access management, and identity-based network security controls.
• Experience supporting security incident response, forensic investigations, and post-incident remediation.
• Familiarity with cloud networking and hybrid infrastructure security (AWS, Azure, Google Cloud Platform).
• Industry certifications such as: CISSP, CCNP Security, JNCIS/JNCIP, GIAC certifications, Security+

Other:

• Excellent written and verbal communication skills Communicates clearly and in an understandable manor with a wide range of people such as peers, managers, customers, vendors, distributors and other teams.
• Problem Solving Identifies and resolves configuration problems in a timely manner
• Demonstrated analytical and problem-solving skills, and the ability to organize and prioritize several projects and tasks at one time
• Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations.
• Ability to write reports, business correspondence, and procedure manuals.
• Ability to effectively present information and respond to questions from groups of managers, clients, customers, and other teams.
• Must be a team player, to provide input to other team members, and accept feedback

Custom Skill Requirement: Network security engineering within large enterprise, telecommunications, ISP, cable, cloud, or service provider environments.

Top Skills & Years of Experience Deliverables:

• Responsible for the security posture and execution roadmap for the client network domains and platforms such as Cisco, Ciena, Juniper, Arista, Nokia, F5, Fortinet etc.
• Support vulnerability remediation, risk mitigation, and patch validation activities for critical vulnerabilities, and vendor security advisories.
• Enable secure configuration rollout and compliance enforcement across supported platforms using approved network security standards, audit tooling, ticketing workflows, and remediation tracking
• Review network functions, features, software, hardware, and engineering designs to identify security risks, required mitigations, operational impacts, and production readiness requirements.
• Perform security assessments of network platforms and services to identify threats, vulnerabilities, exposed services, insecure protocols, weak authentication methods, access control gaps, and hardening opportunities.
• Partner with cross functional organizations/teams such as cybersecurity, architecture, network engineering, operations, and vendor teams to implement least-privilege access, improve auditability, and detect unauthorized or anomalous network changes.

For applications and inquiries, contact:View email address on us.fitly.work