Engineer - Network Security

Iberdrola; Town of Florida (NY); On-site; USD 96,000 - 121,000; Full time

Benefits offered by this job

Benefits

Bonuses

401(k) match

Health/dental/vision insurance

Tuition reimbursement

Career development

Job summary

AVANGRID MANAGEMENT COMPANY, LLC. is seeking an Engineer – Network Security to implement enterprise network security solutions. You will support engineering, installation, maintenance and administration of security technologies, translating business requirements into secure designs.

The role reports to the Sr. Manager – IT Security and requires hands-on work with Fortinet, Palo Alto, Check Point, Zscaler and Akamai technologies in an in‑office environment in Connecticut/Orange area.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems or related field with 2+ years in network engineering.
• Hands-on experience with enterprise firewalls, secure web gateways and web applications.
• Equivalent education/experience may be considered.

Responsibilities

• Gather business requirements and architect new network solutions to meet needs and standards.
• Collaborate with global counterparts and manage vendor relationships.
• Review infrastructure performance and plan lifecycle upgrades to meet SLAs.
• Support SDWAN deployment, monitoring, and optimization with Fortinet preference.
• Configure and optimize firewalls and SIEM integration.
• Analyze security incidents and assist in cyber investigations.

Skills

Network security

Fortinet FortiGate

Palo Alto Networks

Check Point

Zscaler

Akamai WAF

SDWAN

Education

Bachelor’s degree in Computer Science or related field

Fortinet NSE

Palo Alto PCNSE

Checkpoint CCSA/CCSE

Zscaler Certified Professional

Akamai Security certifications

Tools

Fortinet FortiGate

Palo Alto Networks

Check Point

Zscaler

Akamai WAF

Web Application Firewall (WAF)

SDWAN

Job description

Engineer - Network Security

Reports to: Director - Network Technologies
Location: In Office , Orange CT

The base salary range for this position is dependent upon experience and location, ranging from:

• $96,400 - $120,500

What We Offer:

• Competitive benefits and growth opportunities
• Generous performance‑based bonuses
• 12% 401(k) match
• Comprehensive health, dental, and vision insurance
• Tuition reimbursement
• Professional development and clear career‑advancement pathways

Job Summary

The Engineer – Network Security role performs as a technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. This role will support the engineering, installation, maintenance and administration of all technical aspects of corporate network security including software and hardware. The incumbent will be responsible for translating business requirements into secure network solutions or process designs.

The Engineer – Network role reports into the Sr. Manager – IT Security.

Key Responsibilities

• Supports IT Network Security in projects, by gathering business requirements and architects / designs new network solutions to meet business needs, global standards and network & security design standards.

• Interacts with global counterpart to reach agreement on solutions. Manage relationship with outsourced vendors and coordinates the execution of the design plan. Ensures that all aspects of the architecture are executed to plan.

• Consistently reviews performance of existing infrastructure; plans and executes lifecycle upgrades as required to meet/exceed existing SLAs. Plans, coordinates, communicates and executes upgrades, partners with cross functional teams as required.

• Partners with outsourced vendors in support of the executed design plan.

• Analyzes current state and proposed network related infrastructure and conducts risks assessments based on impact and potential severity of a security related issue.

• Participates in cyber investigations; analyzes data/evidence to identify potential cyber incidents and vulnerabilities.

• Supports forensic research, as required to assess impact to corporate information assets. Provides insights into recommendations for corrective actions.

• Monitors assigned aspects of Internet and intranet security and ensures ongoing effectiveness. Proactively assesses and makes recommendations for improvement.

• Assist in the deployment, configuration, and maintenance of SDWAN solutions with preference for Fortinet. Responsibilities include monitoring SDWAN performance, troubleshooting connectivity and security issues, and collaborating with senior engineers to optimize network architecture.

• Administer, configure, and optimize enterprise firewalls, with a strong preference for experience in Fortinet (FortiGate), Palo Alto Networks, and Checkpoint platforms. Responsibilities include advanced policy management, high-availability setup, firmware upgrades, and integration with SIEM and automation tools.

• Implement and manage secure web gateway solutions, with a preference for Zscaler. Responsibilities include policy configuration, user authentication integration (e.g. SAML, AD), and troubleshooting web access and security incidents.

• Deploy, configure, and maintain Web Application Firewall (WAF), with a preference for Akamai. Responsibilities include rule tuning, monitoring for application-layer threats, and collaborating with application teams to minimize false positives and optimize protection.

• Assigns and coordinates external Internet domain names and identifiers used in network communication and assures their uniqueness.

• Supports the resolution of all network security infrastructure related break/fix issues. Accurately interprets symptoms, identifies root cause and takes appropriate corrective action to resolve.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems or a related field of study with a minimum of two (2) years of hands‑on experience in network engineering, including operational support and troubleshooting of enterprise firewalls, secure web gateways and web application. An equivalent combination of education and experience may be considered.

Preferred Qualifications

• Certifications: Fortinet NSE, Palo Alto PCNSE, Checkpoint CCSA/CCSE, Zscaler Certified Professional, Akamai Security certifications.

• Experience assisting in the deployment, configuration, and maintenance of SDWAN solutions is highly desirable.

• Experience working with secure web gateways: Zscaler

• Experience with web application firewalls: Akamai.

• Experience troubleshooting of enterprise firewalls: Fortinet, Palo Alto Networks, and Checkpoint

#LI-Onsite

#LI-VF1

Company:

AVANGRID MANAGEMENT COMPANY, LLC.

Mobility Information

Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.

At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law.
If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at [e-mail].

Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions. This does not include those that will work for Avangrid Power.

Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.

Job Posting End Date:

September-18-2026