Network Security Engineer

Network Security EngineerWe are seeking an experienced Network Security / Firewall Engineer to design, implement, operate, and troubleshoot enterprise network security infrastructure. The ideal candidate will have strong hands-on experience with Cisco Firepower Threat Defense (FTD/FMC) or comparable next-generation firewall platforms, along with solid knowledge of enterprise routing, VPN technologies, network segmentation, cloud networking, and security best practices. This is a hands-on engineering role requiring strong troubleshooting skills and the ability to work across network, security, cloud, application, and infrastructure teams.Key ResponsibilitiesConfigure, manage, maintain, and troubleshoot enterprise next-generation firewall environments.Administer Cisco FTD firewalls using Firepower Management Center (FMC).Create and maintain firewall access-control policies, network/service objects, security zones, and NAT policies.Design, configure, and troubleshoot site-to-site IPsec VPNs and remote-access VPN solutions.Troubleshoot complex application connectivity issues across firewalls and network infrastructure.Perform packet-level troubleshooting using packet captures, Wireshark, firewall connection/session tables, logs, and platform-specific diagnostic tools.Configure and troubleshoot NAT/PAT, static NAT, source NAT, destination NAT, and NAT exemptions.Support firewall high-availability architectures and perform failover testing.Participate in firewall upgrades, migrations, hardware refreshes, and lifecycle-management activities.Review firewall policies and identify obsolete, redundant, overly permissive, or unused rules and objects.Support network segmentation and security-zone architecture.Configure and troubleshoot web/URL filtering, IPS/IDS, application control, malware protection, and other NGFW security capabilities.Support security infrastructure across on-premises data centers, branch locations, Internet edge, and cloud environments.Participate in incident response and root-cause analysis for network and security incidents.Create and maintain network diagrams, firewall documentation, operational procedures, implementation plans, and troubleshooting runbooks.Participate in change-management processes, including planning, peer review, implementation, validation, and rollback procedures.Salary Range- $85,000-$100,000 a year