Senior Network Security Engineer at Covenant HR Senior Network Security Engineer at Covenant HR in Milton Village, Massachusetts Posted in about 18 hours ago.
Type:
full-time
Job Description:
Company
- Our client is a Boston-based investment management firm specializing in systematic, data-driven global equity strategies for institutional investors. The organization combines sophisticated technology and quantitative research with a collaborative, innovation-focused environment. Job Title
- Senior Network Security Engineer Location
- Hybrid in Boston, MA
- 1 day per week onsite and 4 days remote. Candidates must live in or relocate to a New England state, excluding Maine. Role Type
•
Direct Hire Must Have Skills:
5-10 years of hands-on experience in network security, firewall administration, security operations engineering, network engineering, or a closely related role. Deep hands-on Next-Gen Firewall experience, ideally with Palo Alto Networks, Check Point, and/or Fortinet, including firewall policies, NAT, security profiles, VPN, URL filtering, threat prevention, logging, and lifecycle management. Strong enterprise networking fundamentals across TCP/IP, subnetting, routing, switching, DNS, DHCP, NAT, VPN, TLS, and HTTP/S, with the ability to troubleshoot Layer 3-7 issues. Proven ability to independently own production network security issues through investigation and resolution, including firewall changes/upgrades, incident response, and scheduled after-hours maintenance. Strong problem-solving skills with an adaptable mindset and willingness to learn new technologies.
Responsibilities and Job Details:
Administer, maintain, troubleshoot, and continuously improve enterprise Next-Gen firewall infrastructure and associated security controls. Manage firewall policies, NAT, security profiles, zones, interfaces, objects, routing configurations, management portals, and rule-base hygiene. Configure and tune threat prevention, vulnerability protection, URL filtering, DNS security, sandboxing, decryption, and logging profiles. Support secure remote connectivity and VPN operations, including authentication, client connectivity, configuration, and user-impacting incidents. Troubleshoot complex Layer 3-7 network security issues using packet captures, traffic analysis, CLI/vendor tools, logs, and other diagnostic utilities. Leverage SIEM and AI/AIOps capabilities to identify threats, analyze network and firewall activity, prioritize incidents, and identify opportunities to improve security controls. Participate in firewall rule reviews, segmentation initiatives, access evaluations, control validation, and security cleanup activities. Plan and execute firewall maintenance, firmware upgrades, content updates, high-availability validation, license checks, and capacity monitoring. Partner closely with network engineering, infrastructure, cloud, identity, endpoint, application, and security teams. Maintain clear operational documentation, diagrams, procedures, runbooks, change records, and audit/control evidence. Take independent ownership of issues from initial investigation through escalation, resolution, and follow-up. Participate in incident response and scheduled after-hours maintenance when required.
