Network Security Engineer

Flybridge Staffing is currently seeking a Network Security Engineer for a client based in the Boca Raton area. This is a contract-to-hire role that works on a hybrid schedule. This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization’s on-premises and hybrid infrastructure. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments are completed on schedule.

Experience/responsibilities:

• BA degree in Computer Science, Information Technology, or Cybersecurity, and 5 years of experience preferred.
• Must have experience with Security hardening of systems, networks, and Cloud infrastructure tools.
• Hands-on experience with both on-premises and cloud infrastructure platforms, including vulnerability management, patch management, and OS hardening across Windows and/or Linux server environments.
• Experience with PKI/SSL certificate lifecycle management and IAM/PAM tools (e.G., BeyondTrust or equivalent).
• Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs
• Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere).
• Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables.
• Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning.
• Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls.
• Experience supporting audit and compliance remediation cycles, such as HIPAA assessments, SRAs, or penetration test findings.
• Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices.
• Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours.
• Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments.
• Review and administer security tools to harden network edge security, including next-generation firewalls, SD-WAN, and switching, striving for zero trust networks.
• Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass.
• Patching: Handles the deployment of security patches and system updates across the enterprise.
• Proficiency with firewalls and network security appliances (Palo Alto, Fortinet, Cisco Meraki, Cisco switches), SD-WAN/next-generation firewall administration, and wireless security/NAC (Cisco wireless, HPE Aruba ClearPass).
• Strong understanding of TCP/IP routing, switching, network protocols, and cloud security.
• Experience with IDS/IPS, firewalls (e.G., Palo Alto, Cisco), and EDR platforms.
• Experience with scripting languages (e.G., Python, PowerShell) for automation.

****NO SPONSORSHIP AVAILABLE**** US Citizen, GC, only please. If your background aligns with the above details and you would like to learn more, please submit your resume to View email address on click.appcast.io or on our website, and one of our recruiters will be in touch with you ASAP.

Follow us on LinkedIn to keep up with all our latest job openings and referral program.