Hybrid Network Security Engineer — Lead for Diverse Clients

Boston IT Services Inc; Boston (MA); Hybride; USD 110 000 - 160 000; Plein temps

Résumé du poste

Boston IT Services Inc. (BITS) is seeking a Network Security Engineer to lead client networks in the Greater Boston area. You will design, deploy, and optimize office and lab networks, working with Fortinet and Meraki firewalls, VPNs, and WiFi.

You will coordinate with MDR vendors and compliance teams to maintain security posture and resiliency. The role involves designing network solutions, performing site-to-site VPNs into AWS/Azure, and centralizing runbooks and diagrams.

Qualifications

• 5+ years of hands-on networking (routing, switching, VPN, firewalls, WiFi).
• Experience with Meraki or Fortinet.
• Exposure to MDR platforms like SentinelOne or CrowdStrike.
• Zero trust VPN configurations.
• Ability to own networks across a diverse client base.

Responsabilités

• Design and deploy office and lab networks, including WiFi coverage modeling and VLAN segmentation.
• Manage Fortinet and Cisco Meraki firewalls end to end, including HA and dual-WAN failover.
• Support network vulnerability management, failover testing and monitoring with MDR/security teams.
• Track latency and packet loss; optimize network and WiFi performance.
• Install and manage office devices, AV setups, conference systems, and NAS devices.
• Maintain network diagrams, asset records, and runbooks; drive refresh roadmaps.

Connaissances

Networking

Firewalls

VPN

WiFi

Zero Trust VPN

Client-facing

Outils

Meraki

Fortinet

SentinelOne

CrowdStrike

Cloudflare

AWS

Azure

M365

Description du poste

Boston IT Services Inc. (BITS) is seeking a Network Security Engineer to lead client networks in the Greater Boston area. You will design, deploy, and optimize office and lab networks, working with Fortinet and Meraki firewalls, VPNs, and WiFi.

You will coordinate with MDR vendors and compliance teams to maintain security posture and resiliency. The role involves designing network solutions, performing site-to-site VPNs into AWS/Azure, and centralizing runbooks and diagrams.