Senior Network Security Engineer

Job TitlePay Range $80hr - $85hrRequirement/Must Have:8+ years of experience in Enterprise Networking.5+ years of experience in Enterprise Security.3+ years of experience in Azure Networking.3+ years of experience with WAF/NGFW.3+ years of experience supporting environments with 300+ Network Devices.Experience in incident response, security investigations, log analysis, threat intelligence, and security monitoring.Experience with SIEM products (e.g., Client, Microsoft Sentinel).Experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g., Nessus, Tenable).Experience with Active Directory, MFA, Conditional Access, and Certificates.Experience with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, and Zero Trust principles.Experience with Cisco ISE, NAC, 802.1X, RADIUS, and TACACS.Experience with products such as Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, and F5 BIG-IP.Experience working in highly regulated environments and leading technical troubleshooting during outages.Ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers.Responsibilities:Ensure network security architecture aligns with operational security standards prior to and after deployment.Lead investigation and containment of network security incidents.Review firewall rule requests and ensure compliance with security standards.Design and maintain secure hybrid network architecture across on-premises and Azure environments.Monitor security events using SIEM technologies and coordinate incident response activities.Perform network security assessments and recommend remediation strategies.Develop and maintain network security standards, diagrams, and operational documentation.Support penetration testing and remediation efforts.Participate in on-call support during critical security incidents.Conduct proactive threat hunting and anomaly detection.Validate WAF and firewall placement and integration exposure/connectivity.Identify and diagnose system problems and threats using system logs, line monitors, SIEM, diagnostic software, and test equipment.Identify, prioritize, and remediate network security vulnerabilities.Provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls when required.Work independently on assigned projects.Education and Experience:Achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).