Network Engineer

The position requires hands-on technical expertise across enterprise networking, cybersecurity, firewalls, VPNs, cloud infrastructure, network monitoring, security controls, and NIST-aligned practices


KEY RESPONSIBILITIES


The Network Engineer will be responsible for activities including, but not limited to:

• Configure, administer, and document enterprise firewall infrastructure, access rules, and related network security components.
• Support Palo Alto, Checkpoint, GlobalProtect VPN, Next-Generation Firewalls (NGFW), VPNs, log collectors, and network monitoring technologies .
• Perform firewall deployments, firewall rule migrations, rule administration, policy conversion, and security configuration activities.
• Design, implement, and manage secure enterprise network architectures across network, systems, cloud, telecommunications, data, and web environments.
• Design and maintain network segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other enterprise security controls.
• Configure and support cloud networking infrastructure, firewall policies, security policies, and network traffic monitoring.
• Develop and maintain enterprise security policies, standards, procedures, and technical controls covering authentication, privileged access, network access, remote access, vulnerability management, encryption, firewall administration, monitoring, and incident escalation.
• Conduct network and infrastructure security risk assessments and develop risk-based response and remediation strategies.
• Monitor, analyze, investigate, and respond to cybersecurity threats, vulnerabilities, unauthorized access attempts, network anomalies, security alerts, and policy violations.
• Maintain documentation related to security controls, configurations, incidents, corrective actions, and infrastructure in accordance with NIST guidelines .
• Evaluate emerging network and cybersecurity technologies, products, tools, and procedures and provide recommendations for improving reliability, performance, security, and operational efficiency.
• Provide advanced technical support and consultation to business and IT stakeholders on complex networking, infrastructure, and cybersecurity matters.
• Troubleshoot escalated network and security incidents and coordinate resolution with infrastructure teams, vendors, and other technical stakeholders.
• Provide network and security expertise throughout the IT project lifecycle, including requirements, architecture, design, implementation, testing, deployment, and operational support.
• Review proposed architectures and technical designs to identify security risks and ensure appropriate security controls are incorporated.
• Design, implement, and support enterprise infrastructure including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data-center infrastructure .
• Design network solutions supporting high availability, resiliency, scalability, performance, and security.
• Investigate complex network and security incidents using logging, network monitoring, packet analysis, performance data, and security tools.
• Develop network security architecture and segmentation strategies to protect critical systems, isolate sensitive workloads, limit lateral movement, and establish appropriate security boundaries.
• Analyze east-west and north-south network traffic to identify risks and opportunities for enhanced security controls.
• Establish and monitor network performance and security metrics, dashboards, KPIs, capacity requirements, vulnerabilities, and operational-risk indicators.
• Maintain network and security documentation including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements.
• Collaborate with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions.
• Provide technical leadership, guidance, and mentoring to network and security personnel and support the establishment of network engineering standards and best practices.

• Bachelor's degree in computer science , Information Systems, or another related field , or equivalent work experience.
• Typically, 5-10 years of combined IT and security experience .
• Broad technical exposure to systems analysis, applications, databases, infrastructure, networking, and security environments.
• 3-5 years of experience working with information-security tools based on NIST standards.
• Strong understanding of cybersecurity issues, techniques, controls, and implications across enterprise computing platforms.
• Experience administering enterprise network and security infrastructure.
• Experience with firewall administration, firewall deployments, security policies, firewall-rule migration, VPN technologies, and network access controls.
• Knowledge and experience with enterprise routing, switching, LAN/WAN, wireless networking, network segmentation, and network architecture.
• Experience working with cloud network infrastructure and cloud security controls.
• Experience with network/security monitoring, incident response, vulnerability management, access management, and risk assessment.
• Experience using schematic or network diagramming tools to document infrastructure layouts.
• Ability to independently troubleshoot complex networking, security, infrastructure, and integration issues.
• Ability to develop and maintain technical documentation and network/security standards.
• Ability to work independently and participate in multiple complex IT security initiatives.
• Ability to provide technical leadership and guidance when required

• PCNSE - Palo Alto Networks Certified Network Security Engineer
• CISSP - Certified Information Systems Security Professional
• CCNP - Cisco Certified Network Professional
• CCIE - Cisco Certified Internetwork Expert