Network Security Engineer

We are seeking a Network Security Engineer for a contract position (6+ months) based in Midtown, New York. In this role, you will be responsible for designing, implementing, and maintaining robust network security measures across diverse IT infrastructure environments. Your expertise will ensure the confidentiality, integrity, and availability of organizational data and systems. This position offers an opportunity to work with cutting-edge security technologies, influence security policies, and respond proactively to emerging threats. Responsibilities Develop and enforce comprehensive network security strategies aligned with industry standards such as NIST and ISO 27000 to protect organizational assets. Configure and manage network security devices including Cisco ASA firewalls, Cisco ISE for identity management, IDS/IPS systems for threat detection, and VPN solutions for secure remote access. Conduct vulnerability assessments and penetration testing to identify potential weaknesses within LAN, WAN, SAN, and cloud infrastructure environments such as AWS and Google Cloud Platform. Monitor network traffic using SIEM tools such as Splunk or SolarWinds to detect suspicious activities, perform log analysis, and initiate incident response procedures. Implement system hardening techniques on operating systems including Linux (Debian, CentOS, Ubuntu), Windows, macOS, and UNIX variants to minimize attack surfaces. Manage encryption protocols such as IPsec, SSL/TLS, PKI (Public Key Infrastructure), and FIPS standards to secure data in transit and at rest across diverse platforms. Lead incident recovery efforts by executing disaster recovery plans, system security plans, and threat detection and response strategies in accordance with FISMA and FedRAMP compliance requirements. Qualifications Experience with network security design, implementation, and maintenance across diverse IT infrastructure environments. Proficiency with Cisco ASA firewalls, Cisco ISE, IDS/IPS systems, and VPN solutions. Experience conducting vulnerability assessments and penetration testing. Knowledge of SIEM tools such as Splunk or SolarWinds. Familiarity with system hardening on Linux (Debian, CentOS, Ubuntu), Windows, macOS, and UNIX variants. Understanding of encryption protocols including IPsec, SSL/TLS, PKI, and FIPS standards. Knowledge of industry standards such as NIST and ISO 27000. Experience with cloud infrastructure environments such as AWS and Google Cloud Platform. Familiarity with FISMA and FedRAMP compliance requirements. #J-18808-Ljbffr Intone Networks