Network Security Engineer

Job Title: Network Security Engineer

Location: Erie, PA

Full Time

Job Description

Network Security Engineer

We are seeking an experienced Network Security / Firewall Engineer to design, implement, operate, and troubleshoot enterprise network security infrastructure. The ideal candidate will have strong hands-on experience with Cisco Firepower Threat Defense (FTD/FMC) or comparable next-generation firewall platforms, along with solid knowledge of enterprise routing, VPN technologies, network segmentation, cloud networking, and security best practices.

This is a hands-on engineering role requiring strong troubleshooting skills and the ability to work across network, security, cloud, application, and infrastructure teams.

Key Responsibilities

Configure, manage, maintain, and troubleshoot enterprise next-generation firewall environments.

Administer Cisco FTD firewalls using Firepower Management Center (FMC).

Create and maintain firewall access-control policies, network/service objects, security zones, and NAT policies.

Design, configure, and troubleshoot site-to-site IPsec VPNs and remote-access VPN solutions.

Troubleshoot complex application connectivity issues across firewalls and network infrastructure.

Perform packet-level troubleshooting using packet captures, Wireshark, firewall connection/session tables, logs, and platform-specific diagnostic tools.

Configure and troubleshoot NAT/PAT, static NAT, source NAT, destination NAT, and NAT exemptions.

Support firewall high-availability architectures and perform failover testing.

Participate in firewall upgrades, migrations, hardware refreshes, and lifecycle-management activities.

Review firewall policies and identify obsolete, redundant, overly permissive, or unused rules and objects.

Support network segmentation and security-zone architecture.

Configure and troubleshoot web/URL filtering, IPS/IDS, application control, malware protection, and other NGFW security capabilities.

Support security infrastructure across on-premises data centers, branch locations, Internet edge, and cloud environments.

Participate in incident response and root-cause analysis for network and security incidents.

Create and maintain network diagrams, firewall documentation, operational procedures, implementation plans, and troubleshooting runbooks.

Participate in change-management processes, including planning, peer review, implementation, validation, and rollback procedures.