Please read the Job Description thoroughly as unsuitable candidates will not be contacted. Please answer all screening questions as you may be automatically disqualified from the process for not doing so. Job Overview Cybertools is expanding our engineering team to keep pace with growing project demand across our customer base, and this Network & Security Engineer role plays a key part in that growth. While project delivery is the primary focus, we value engineers who can flex where needed — supporting other engineering priorities or client needs as they arise. The role is built around project delivery — designing, deploying, and hardening infrastructure across a wide variety of active engagements throughout our customer base, with that focus taking priority over day-to-day helpdesk work, unless otherwise directed. It is centered on network architecture, security hardening, and IT governance work, reporting to the IT SDM, who owns overall project coordination and client relationships. Key Responsibilities Network Architecture & Segmentation Design and implement VLAN segmentation, managed switching, and guest/IoT network isolation across multiple client sites. Segment camera (CCTV) systems, irrigation/sprinkler controls, and other specialty devices onto isolated network segments, coordinating with third-party vendors as needed. Redesign wireless network architecture, including migrations from legacy or locally-managed platforms to centrally-managed solutions. Support enterprise VPN connectivity, including SSL VPN, client-to-site, site-to-site, and SaaS-based secure remote access solutions. Internet Resiliency & Routing Design and configure secondary/backup internet connections and automatic failover routing. Evaluate and implement WAN failover strategies, including hands-on testing to validate actual failover performance and business continuity. Design, deploy, and manage enterprise SD-WAN and routed networks (static and dynamic routing) across multi-client sites, utilizing diverse connection types including DIA, broadband, cellular, satellite, and microwave. Security Hardening & Firewall Management Deploy, configure, and replace enterprise firewalls, including auditing, cleaning up, and re-documenting legacy policies to enforce least-privilege access. Support VAPT (vulnerability assessment and penetration testing) and cyber insurance readiness assessments by evaluating current controls against typical underwriting requirements. Deploy, harden, and maintain enterprise MFA platforms (e.g., Duo) and enterprise Privileged Access Management (PAM) solutions. Identity, Device & Endpoint Management Design and deploy Mobile Device Management (MDM/MAM) programs, including compliance policies and encryption enforcement. Leverage EDR/AV platforms for proactive threat isolation, threat hunting, and automated endpoint remediation. Map threat intelligence, security alerts, and adversarial behaviors to the

MITRE ATT&CK

framework to support security incident management. Support identity platform design decisions (e.g., Entra ID/M365 tenant structure) for clients with standalone or under-managed environments. Business Continuity, Disaster Recovery & Governance Develop documented Disaster Recovery and Business Continuity plans, including RTO/RPO definitions and recovery testing. Build governance program deliverables for clients, including risk registers, incident response plans, and IT policy frameworks. Design centralized logging and SIEM deployments to support incident investigation and detection. Support data classification program design for clients with regulatory or industry compliance obligations. Perform IT audits and infrastructure assessments to identify risk, document current-state network topology, and inform remediation roadmaps. Required Qualifications 5+ years of hands-on experience in network engineering (switching, routing, VLANs, firewalls, wireless) in an MSP or multi-client environment. Working knowledge and set up of firewall platforms (e.g., WatchGuard, Fortinet, SonicWall or similar), managed switching, and enterprise wireless platforms (e.g., Aruba, Instant On, or comparable). Experience with Microsoft 365 / Entra ID administration, including tenant design and Conditional Access concepts. Demonstrated ability to manage multiple concurrent client projects and communicate technical findings to non-technical stakeholders. Valid driver's license and ability to travel regularly to client sites in the South Sound / Puget Sound region. Preferred Qualifications Bachelor's degree in IT or similar. 7+ years of professional network engineering experience. Experience with MDM platforms (Microsoft Intune or comparable). Prior exposure to IT governance frameworks (risk registers, incident response planning, change management) or compliance-driven environments. Familiarity with diverse industry compliance frameworks, including HIPAA, CMMC, SOX, SOC2, and

NIST 800-53 / 800-171

guidelines. Relevant certifications such as CompTIA Network+/Security+, Cisco CCNA, or equivalent. Experience with SIEM/centralized logging platforms. Project management certification and experience will be considered an asset. Any other relevant network/cybersecurity certifications.

Pay:

$95,000.00 - $125,000.00 per year

Benefits:

Health insurance Paid time off Professional development assistance Vision insurance Application Question(s): Are you authorized to work in the United States for any employer? Will you now or in the future require employment sponsorship from your employer? What is your salary requirement ("Negotiable" is not an answer - please provide a range or firm dollar value)?

Experience:

network engineering (switching, routing, firewalls): 5 years (Required) professional network engineering : 7 years (Required) MDM platforms (Microsoft Intune or comparable).: 3 years (Required) compliance frameworks, including HIPAA. : 5 years (Required)

Work Location:

Hybrid remote in Puyallup, WA 98374