Network Security Engineer

Position Overview:
We are seeking a highly skilled and motivated Network & Security Engineer to design, implement, and maintain the company's network and security infrastructure. The ideal candidate will possess a deep understanding of network protocols, security policies, and firewall management, combined with the ability to troubleshoot complex network and security issues.
You will collaborate with cross-functional teams to ensure the security, efficiency, and performance of all IT systems, enabling secure communication, data transfer, and protection from cyber threats.
Key Responsibilities:
Network Infrastructure Design & Implementation:

• Design, deploy, and maintain local and wide area network (LAN/WAN) solutions.
• Configure and troubleshoot network devices including routers, switches, firewalls, and wireless access points.
• Manage and monitor network performance, ensuring optimal uptime and minimal disruptions.
• Implement and manage VPNs, SDWAN, and other remote access technologies.

Network Security Management:

• Develop and enforce security policies and best practices for network infrastructure.
• Configure, monitor, and manage firewalls (e.g. Palo Alto, Cisco, Fortinet, Checkpoint).
• Implement Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).
• Perform regular vulnerability assessments and penetration testing.
• Ensure compliance with internal and external security standards (e.g. ISO 27001, NIST, GDPR).

Incident Response & Troubleshooting:

• Act as the first point of contact for network and security-related incidents.
• Investigate, analyze, and resolve network and security issues in a timely manner.
• Respond to security alerts and take appropriate action such as mitigation or escalation.
• Perform root cause analysis and implement corrective actions to prevent recurrence.

Security Monitoring & Reporting:

• Continuously monitor network traffic for suspicious activities and potential security breaches.
• Maintain network security logs and generate reports for management.
• Assist with security audits and risk assessments, identifying potential vulnerabilities.

Collaboration & Documentation:

• Collaborate with IT teams, vendors, and other departments to implement network and security solutions.
• Provide technical expertise and support to other teams for troubleshooting and resolving network issues.
• Document network configurations, security measures, incident resolutions, and best practices.

Requirements
Professional Experience:

• Minimum 3-5 years of experience in network engineering or security roles.
• Proven experience with network devices (routers, switches, firewalls) and security technologies (IDS/IPS, VPN, NDR, WAF, Load Balancers).
• Experience with cloud networks and hybrid environments (AWS, Azure, Google Cloud) is a plus.
• Strong knowledge of TCP/IP, BGP, OSPF, DNS, DHCP, VLANs, and network troubleshooting.
• Proficiency in firewall and VPN technologies (Palo Alto, Fortinet, Cisco FTD).
• Experience with network switches & routers (Cisco, Juniper, Huawei).
• Experience with SDN (Cisco ACI).
• Experience with network monitoring tools (e.g. SolarWinds, Nagios, Wireshark).
• Experience with Load Balancers/WAF (F5, Array).
• Experience with NAC (Cisco ISE, Forescout, Aruba).
• Familiarity with network security best practices, encryption technologies, and secure network design.
• Excellent troubleshooting and problem-solving skills.
• Strong written and verbal communication skills.

Preferred Qualifications:

• Experience with automation tools (e.g. Ansible, Terraform, Python scripting).
• Experience with DNS Security (F5, Infoblox).
• Familiarity with security Email Security tools (e.g. Fortimail, Proofpoint).
• Knowledge of regulatory compliance standards and frameworks (e.g. GDPR, HIPAA, PCI DSS).

Working Conditions:

• Full-time position with occasional on-call or after-hours support as required.
• Some local travel may be required depending on the nature of the role.

Education:
Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience).
Certifications:
Cisco Certified Network Associate (CCNP), Palo Alto PCNSE, Fortinet NSE, JNCIA or equivalent certifications.