Network Security Engineer

The Network Security Engineer will design, implement, and maintain secure enterprise network infrastructure while proactively defending against threats. You will own the availability, performance, and security of firewalls, intrusion detection/prevention systems, VPNs, and perimeter defenses across on-prem and multi-cloud environments.

Key Responsibilities:

Assess network security requirements and design hardened architectures (zero-trust, segmentation, DMZ, SASE/SSE)Select, deploy, and integrate security appliances and software (firewalls, IDS/IPS, WAF, VPN concentrators, proxy, NAC)Build and maintain firewall policies, NAT rules, VPN tunnels, and secure remote access solutionsPerform advanced troubleshooting of network and security incidents using packet capture, traffic analysis, and log correlationRespond to security events, conduct root-cause analysis, and implement remediation plansManage and tune perimeter defenses: Palo Alto, Fortinet, Cisco Firepower, Check Point, Cloudflare, Zscaler, etc.

Implement and maintain intrusion detection/prevention (Snort, Suricata, Zeek, CrowdStrike Falcon, Microsoft Defender for Cloud)Conduct regular security assessments, rule reviews, penetration test support, and compliance audits (PCI, SOC2, ISO27001, NIST)Automate repetitive tasks via scripting (Python, Ansible) and infrastructure-as-code where possibleProvide Tier-3 escalation support and post-incident reporting