Network Security Engineer

Job Description

Job Description

Network Security Engineer 11001

A growing technology organization is seeking a Senior Network Security Engineer to join its centralized Security Engineering team. This is a hands-on technical role responsible for designing, implementing, and maintaining network security infrastructure that protects a large-scale, high-performance computing and cloud environment.

This position will contribute directly to the controls, automation, and operational practices required to secure complex infrastructure at scale. The Senior Network Security Engineer will help design, develop, and deliver critical network security capabilities across enterprise-scale systems and projects.

The ideal candidate brings deep technical expertise in network security architecture and controls, along with the judgment needed to solve complex problems while balancing security requirements, operational needs, and delivery timelines. Working closely with security leadership and cross-functional infrastructure, cloud, and IT teams, this individual will help strengthen the organization's security posture while serving as a subject matter expert and mentor to other engineers.

Responsibilities

• Contribute to the design, implementation, and delivery of scalable network security architecture and controls, including firewalls, IDS/IPS, and VPN technologies across on-premises and cloud environments.
• Serve as a subject matter expert for network security technologies, providing technical guidance and direction on complex security challenges.
• Apply strong technical judgment to resolve network security issues and make appropriate trade-offs between security requirements, operational needs, and delivery objectives.
• Collaborate with infrastructure, cloud, IT operations, and other cross-functional teams to communicate technical decisions, coordinate implementation efforts, and maintain alignment.
• Develop and maintain network security standards, policies, procedures, and technical documentation.
• Support network segmentation and micro-segmentation initiatives, providing expertise related to traffic flows, access controls, and policy enforcement.
• Participate in security architecture reviews for new projects, systems, and third-party integrations to ensure network security requirements are appropriately addressed.
• Identify and implement opportunities for process improvement, automation, and security tooling enhancements.
• Mentor junior security engineers and contribute to the technical growth of the security engineering team.

Requirements

• 7+ years of experience in network security engineering, including hands-on experience across trusted, untrusted, and DMZ environments.
• Strong understanding of network protocols and the OSI model, with practical experience supporting TCP/UDP-based applications, routing, switching, and load balancing.
• Experience designing and securing both on-premises and cloud network environments using platforms such as AWS, Azure, or GCP.
• Demonstrated ability to identify and deliver process improvements, automation opportunities, and tooling enhancements within a security engineering environment.
• Experience with security monitoring tools and SIEM platforms, including investigating and responding to network-based security threats.
• Strong knowledge of recognized security frameworks and hardening standards such as NIST, CIS Benchmarks, or ISO 27001.
• Strong communication skills with the ability to clearly explain technical decisions, risks, and trade-offs to both technical stakeholders and leadership.

Nice to Have

• Relevant security or networking certifications such as CCNP Security, PCNSE, CISSP, or equivalent.
• Experience with VXLAN EVPN data center architecture.
• Background in Security Operations Center (SOC) environments or experience working with managed security service providers (MSSPs).
• Experience with firewall automation.