Network Security Engineer

Network Security Engineer

Fort Collins, CO (Hybrid) Type: Contract (C2C) Interview Mode: Virtual

Seeking a senior Network Security Engineer to lead firewall modernization, VPN transformation, zero-trust implementation, and enterprise vulnerability management across enterprise lab environments. This role supports secure, scalable, and compliant next-generation infrastructure platforms.

Core Responsibilities:

Firewall & Network Security Architecture

• Configure and optimize enterprise firewall platforms (physical and virtual)
• Design rule sets, traffic policies, and network segmentation
• Implement micro-segmentation and zero-trust architecture
• Align firewall policies with modern security frameworks

VPN & Secure Access Transformation

• Replace legacy OpenVPN environments with OKTA/Atmos-based VPN solutions
• Build and manage Atmos connectors
• Implement secure authentication workflows
• Design secure routing and hybrid access policies

Vulnerability Management

• Design and implement enterprise vulnerability scanning programs
• Deploy and manage tools such as Nessus or Greenbone
• Configure scan schedules and tune scan noise
• Deliver actionable security reports
• Drive remediation workflows with engineering teams

Security Segmentation & Compliance

• Design security-driven network segmentation strategies
• Enforce access controls aligned to compliance and corporate standards
• Partner with corporate security teams on policy implementation

Linux & Security Automation

• Deploy Linux-based security tooling platforms
• Automate scanning, reporting, and remediation workflows
• Script security processes and integrations

Required Skills:

• Enterprise firewall configuration and optimization
• VPN technologies and secure remote access solutions
• Zero-trust and micro-segmentation principles
• Vulnerability scanning tools (Nessus, Greenbone, or similar)
• Security compliance scanning and remediation
• Linux system administration and automation

Nice to Have:

• OKTA integrations and identity-based access systems
• SIEM and security monitoring platforms
• Automation frameworks and API integrations

Flexible work from home options available.

Compensation: $50.00 - $60.00 per hour