Systems & Network Security Engineer

The Staff Information Security Engineer is expected to understand complex technology systems and tools in both the traditional Information Technology and Service Provider domains. It is essential for this role to maintain awareness of security trends, government regulations and 3rd-party standards (NIST, ISO), as well as to monitor developments in systems, protocols, tools, and other changes in the information security space. Additionally, the staff engineer understands and supports the business environment in which security operates.

This role requires collaboration with architects, senior-level engineers, management, and stakeholders inside and external to the organization, both to ensure awareness of security risks and to ensure appropriate mitigation steps are taken.

Bachelor’s degree or equivalent combination of education and relevant experience. Advanced Degree preferred.

Required Experience:

A minimum of 10 years of related experience, or equivalent mix of education and related experience.Knowledge of security in Telecommunications, Operational Technology (OT), or relevant settingProficient in scripting with Python (preferred) or a similar language like PowerShellMust have prior experience in systems administration and/or engineering in Linux/Unix

Preferred Experience:

Experience with asset discovery and logical asset managementSolid understanding of authentication and identity technologies (IAM, SSO, RADIUS, TACACS+, AD/LDAP/Kerberos)Experience with compliance frameworks, particularly NIST CSF, NIST 800-53, and/or ISO 27001Experience with administration of Splunk, Splunk ES or other SIEM platformsFamiliarity with Infrastructure as Code and automation tools (Terraform, Ansible, git)Familiarity with AWS, Microsoft Azure, and Office 365 security controls (e.g., IAM, PIM, Identity Governance, Azure Policies, Entra, Intune, DLP, IaaS)Familiarity with EDR/MDR/XDR platformsExperience with security incident responseStrong understanding of operating systems and command line administration at all levels.Strong understanding of TCP/IP networking protocols at all layers of the OSI stackUnderstanding of the HTTP protocol, Web Application Firewall (WAF) technologies, BurpSuite testing, and APIsUnderstanding of PKI, SSL/TLS, and cryptographic functionsExperience working in micro-segmented environmentsComfortable with regular expressions

Current relevant industry certifications (SANS/GIAC, etc.), Azure or AWS architecture or security certifications.

Key Competencies:

Excellent oral and written communication skillsExcellent critical thinking, analytical, and engineering skills, including the ability to independently analyze and understand both new technologies and legacy solutions.Demonstrated commitment to ongoing skills development, Amazon Web Services (AWS), Analysis Skills, Ansible, Authentication, Automation, Business Support, Cloud Computing, Collocation, Command Line, Computer Security, Cryptography, Customer Relations, Data Quality, Engineering, Firewalls, GIAC - Global Information Assurance Certification, Genetics, Git, Government Regulations, HTTP (HyperText Transport Protocol), ISO (International Organization for Standardization), Information Technology & Information Systems, Information/Data Security (InfoSec), Infrastructure as a Service (IaaS), Internet Application, Internet Security, Kerberos, LDAP (Lightweight Directory Access Protocol), Linux Operating System, Microsoft Office, Microsoft Windows Azure, Military, Network Administration/Management, Network Configuration Management, Network Security, Open Systems Interconnection (OSI), Operating Systems, Operations Security (OPSEC), Presentation/Verbal Skills, Protocol Independent Multicast (PIM), Public Key Infrastructure (PKI), Python Programming/Scripting Language, RADIUS (Remote Authentication Dial-In User Service), Regular Expressions, SSL-TLS (Secure Socket Layer - Transport Layer Security), Scripting (Scripting Languages), Security Architecture, Security Information and Event Management (SIEM), Single Sign-On (SSO), Software Engineering, Splunk, Systems Administration/Management, TACACS+ (Terminal Access Controller Access Control System Plus), TCP/IP (Transmission Control Protocol/Internet Protocol), Telecommunications, Testing, U.S. National Institute of Standards and Technology (NIST), Unix Operating Systems, Writing Skills

Benefits Overview:Segra offers a very robust benefits package to our full-time employees, some of which include:

Medical, dental, vision insuranceLife insurance401(k) matchFlexible Spending/Health Savings AccountsTuition and gym reimbursementsVacation/PTO, paid holidays, floating holidaysVolunteer days, parental leaveLegal, accidental, hospital indemnity, identify theft, pet insurance

Our Commitment to Equality:Segra is an equal opportunity employer and prohibits discrimination of any kind. Segra does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

Salary Range: $116,025 - $140,000

Beyond competitive health and retirement benefits with immediate 401(k) vesting, Segra also invests in your total well-being through programs supporting physical, mental, financial, and social wellness.

About Segra:Segra owns and operates a wide and dense fiber-optic infrastructure footprint that provides state-of-the-art connectivity, cybersecurity, voice, cloud and colocation solutions, all backed by industry-leading service and reliability. Serving over 30,000 connected customer locations, Segra has been providing customer-focused solutions for over 125 years.

At Segra, we imagine, we engineer and we build a world of opportunities for our customers through fiber-enabled technologies, driven by our customer-first mentality. We invest in the communities we serve by hiring locally, empowering our teams, and continually upgrading our network infrastructure to deliver smarter, stronger technology solutions.