Network Infrastructure Security Engineer

AHU Technologies Inc.; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work from home

Job summary

AHU Technologies Inc. is seeking a Senior Network Security Engineer II to support the design, implementation, operation and security of the Client network and security infrastructure. The role requires hands-on expertise in security appliances and network architectures across multi-site environments.

The position offers flexible work-from-home options and involves configuring Cisco Firepower, ASA, and ISE devices while ensuring compliance with security standards and incident response processes.

Qualifications

• Experience building large scale, multi-site network architectures.
• Experience with secure remote access/WAN technologies (IPsec, VPN).
• Knowledge of network-based and system-level attacks and mitigation methods.
• Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls.

Responsibilities

• Monitor and optimize client network security and performance.
• Configure routers, switches, and firewalls per security standards.
• Oversee network security measures and incident response.
• Coordinate with Infrastructure Services for network changes.
• Forensic and packet analysis capabilities.

Skills

Network security

Large scale networks

VPN/IPsec

Threat knowledge

Incident response

Education

CCNA/CCNP/CCIE/CISSP

Tools

Cisco Firepower

Cisco ASA

Cisco ISE

NGFW

Job description

Job Description

Senior Network Security Engineer II supports the ongoing design, implementation, operation and security of the Client network and the supporting security infrastructure.

Employment Type: W2/ 1099

Duties & Responsibilities

• Ability to monitor and analyze data traffic patterns within the Client network infrastructure;


• Identify network problems and recommend improvements to ensure optimal performance;


• Ability to improve network quality regarding any degradation;


• Ability to enhance security and knowledge of the latest security threats, worms and malware and advise on how to deter them;


• Ability to ensure reliability and stability of the work through the above actions;


• Configure routers, switches, firewalls and other appliances in compliance with Client security standards


• Monitor security measures in place within network perimeter, ensuring breaches do not occur and information is safeguarded from unauthorized access;


• Proactively oversee the activities involved in quality resolution of complex technical issues, responding with an appropriate sense or urgency to problems escalated to Network Engineer’s level;


• Coordinate with appropriate personnel to determine positive solutions that increase end user satisfaction, following through to completion, and communicating resolution results; escalte to management any situation that could adversely impact the service provided to the end user;


• Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future occurrences and improve customer service levels in an appropriate timeframe;


• Provide network design services


• Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical approach to be used for proposed network changes;


• Ensure adherence to network policies and procedures;


• Manage production and disaster recovery networks and security


• Ability to perform forensic and packet analysis;


• Ability to configure and operate network security-focused monitoring and logging systems

Qualifications

• Experience building large scale, multi-site network architectures


• Experience with secure remote access/WAN technologies (IPsec, VPN, etc.)


• Knowledge of network-based and system-level attacks and mitigation methods


• Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls;


• Experience with security routing protocols

Technical Skills

Security: Cisco Firepower (Next generation firewall), Cisco ASA Firewalls, Cisco ISE 2.0 and above (Identity Services Engine), Cisco NGFW (Next Generation Firewall), Cisco AMP (Advanced Malware Protection), Cisco Firepower.

Skill Matrix

• Experienced in the development, configuration, installation, and maintenance of networked systems including LANs, WANs and Telephony Systems


• Experience with network standards, protocols, and procedures


• Experienced in network architecture and topology, including transmissions protocols, broadcasting, switching, control, and management


• Experience in performing routing networking configuration management functions.


• Experienced in network systems management methods including end-to -end systems performance monitoring.


• Certification in network or system administration is highly desired, such as CCNA, CCNP, CCIE, CISSP, MCSE, MCSA

Flexible work from home options available.