Security Engineer – Network & Infrastructure Security

Role overview

Strengthen security across corporate networks, cloud infrastructure, identity, endpoints, email, and software-as-a-service environments. This hands-on engineering role has particular ownership of firewalls and secure connectivity, while partnering with infrastructure, DevOps, and IT teams to troubleshoot issues, respond to alerts, and improve security controls.

Responsibilities - Administer and improve firewalls, VPNs, network segmentation, access policies, and connectivity between users, offices, cloud services, and third parties. - Review and maintain firewall rules, remove unnecessary access, and follow change procedures that include testing, documentation, rollback planning, and post-change validation. - Troubleshoot network and firewall issues and analyze traffic, logs, and alerts to support investigations. - Help design secure network and cloud architectures, applying least-privilege access principles. - Investigate security alerts and incidents, identify vulnerabilities or configuration gaps, and coordinate remediation with technology owners. - Support security monitoring, assessments, project integrations, automation, and technical evidence for security frameworks.

Requirements - Strong enterprise networking knowledge, including TCP/IP, routing, switching, DNS, DHCP, NAT, and VLANs. - Hands-on experience administering enterprise firewalls and designing network access controls or segmentation. - Experience with site-to-site and remote-access VPNs and network traffic analysis. - Background in secure network architecture, cloud security, and incident troubleshooting. - Experience with vulnerability management and remediation in a Microsoft enterprise environment. - At least five years in systems administration, network infrastructure, or enterprise IT operations; practical experience is valued over specific certifications.

Nice to have - Familiarity with Azure networking, Palo Alto, Fortinet, or Cisco technologies. - Certifications such as PCNSA/PCNSE, FCP/FCSS, CCNA/CCNP, AZ-500, SC-200/SC-300, or Security+. - Experience supporting SOC 2, CIS Controls, or ISO 27001-aligned practices.