Network Security Engineer

Network Security Engineer - Web Proxy Separation SME

Must Have Technical/Functional Skills:

• Technical expertise and hands-on experience with enterprise-grade Firewall platforms (e.g., Palo Alto Networks, Check Point, Cisco ASA/FTD).
• Knowledge and practical experience with Web Proxy solutions (e.g., Zscaler, Forcepoint/Websense, Blue Coat/Symantec ProxySG).
• Understanding of network protocols (TCP/IP, DNS, VPNs) and network security concepts (e.g., IDS/IPS, VPN, NAT, load balancing).
• Proficiency in analyzing network traffic and logs to identify security incidents, troubleshoot connectivity issues, and optimize performance.
• Experience with scripting (e.g., Python, PowerShell) for automation of security tasks is a plus.
• Excellent problem-solving, analytical, and diagnostic capabilities.
• Strong communication and interpersonal skills, with the ability to articulate complex technical concepts clearly to diverse audiences.
• Ability to work independently as an SME and as part of a larger technical team.

Roles & Responsibilities:

Network Security Engineer - Web Proxy Separation SME Overview:

We are seeking a Network Security Engineer to serve as a Subject Matter Expert (SME) in Web Proxy and Firewall rules maintenance, specifically supporting a significant divestiture initiative. This individual contributor will be responsible for the configuration, optimization, and troubleshooting of web proxy and firewall policies, ensuring robust network security and seamless transition of services during the divestiture. The role requires deep technical expertise, meticulous attention to detail, and the ability to work collaboratively within a dynamic environment.

Key Responsibilities:

• Act as the primary SME for all Web Proxy (e.g., Zscaler, Forcepoint, Blue Coat) and Firewall (e.g., Palo Alto Networks, Check Point, Cisco ASA) rule sets and configurations.
• Design, implement, and maintain complex firewall rules and web proxy policies to enforce security controls and meet divestiture requirements.
• Perform routine maintenance, updates, and optimization of existing web proxy and firewall rules, ensuring adherence to security best practices and compliance standards.
• Provide advanced troubleshooting and incident response support for network security issues related to web proxy and firewall configurations.
• Collaborate with network engineering, application, and security operations teams to ensure proper integration and functionality of security devices during the divestiture process.
• Assist in the planning and execution of network segmentation and access control list (ACL) migration strategies for separating entities.
• Develop and maintain comprehensive documentation for network security configurations, policies, and operational procedures.
• Participate in security audits and provide expert guidance on web proxy and firewall capabilities.

Education and Experience:

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related engineering field.
• Experience: o Minimum of 3-5 years of dedicated experience in Network Security Engineering.
• o At least 2-3 years of hands-on experience specifically managing and maintaining Web Proxy and Firewall solutions in an enterprise environment.
• o Proven experience acting as a Subject Matter Expert in network security domains.
• o Relevant industry certifications such as CCNA Security, PCNSE (Palo Alto Networks Certified Network Security Engineer), CCSA/CCSE (Check Point Certified Security Administrator/Expert), Zscaler certifications (ZCCA, ZCSE) are desirable.
• Required: English fluency (oral and written).

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.