Network Security Engineer

• Implement and manage network security solutions including firewalls, proxies, system hardening, threat profiling, and segmentation strategies to protect the integrity of our compute environment
• Respond to network security incidents, supporting triage and resolution efforts and contributing to root cause analysis and corrective actions
• Develop and maintain automation scripts, security playbooks, and policy frameworks to enable consistent, repeatable security operations
• Contribute to network vulnerability assessments and support remediation planning to close identified gaps
• Support the automation of security infrastructure build, day-two operations, and lifecycle management using platforms such as Python, Terraform, Algosec, Tufin, Jenkins, and Git
• Work closely with Infrastructure, DevOps, and Application teams to embed security controls throughout the technology stack
• Maintain accurate documentation of security configurations, procedures, and network topology

• 5+ years of experience in network security engineering, with hands-on experience across trusted, untrusted, and DMZ environments
• Strong understanding of network protocols and the OSI model, with practical experience in TCP/UDP-based applications, routing, switching, and load balancing
• Solid knowledge of network security technologies including firewalls, VPNs, proxies, MACsec, IPsec, HTTPS, certificate chains, DNS, NTP, AAA, and domain-based authentication and authorization
• Experience with one or more leading security vendors such as Palo Alto, Fortinet, Check Point, or F5
• Familiarity with Zero Trust principles, network segmentation, and secure cloud networking in AWS or Azure
• Hands-on experience with scripting and automation using Python, Ansible, or Terraform
• Strong problem-solving skills, a self-driven work ethic, and a passion for technology
• Relevant certifications such as CISSP, CCNP Security, GIAC (GSEC/GCIH), Palo Alto, or Fortinet are a plus

Nice to Have

• Experience with VxLAN EVPN data center architecture
• Experience in hybrid or multi-cloud environments
• Background in SOC operations or working with MSSPs
• Firewall automation experience