Network Security Engineer

Flybridge Staffing; Boca Raton (FL); Hybrid; USD 100,000 - 140,000; Full time

Job summary

Flybridge Staffing is seeking a Network Security Engineer for a client in the Boca Raton area. This contract-to-hire role offers a hybrid schedule and focuses on hardening, securing on-premises and cloud infrastructure, and maintaining secure configurations.

You will address findings from penetration tests, SRAs, and HIPAA assessments, and support ongoing patching, IAM/PAM, and network privilege controls. The ideal candidate holds a BA degree in CS/IT/Cybersecurity with several years of security

Qualifications

• BA degree in Computer Science, Information Technology, or Cybersecurity with 5 years of experience preferred.
• Must have experience with security hardening of systems, networks, and Cloud infrastructure tools.
• Hands-on experience with on-premises and cloud infrastructure, including vulnerability management and patching.
• Experience with PKI/SSL lifecycle management and IAM/PAM tools (e.g., BeyondTrust).
• Remediation for findings from penetration tests, SRAs, and HIPAA assessments, tracked to SLA.
• Security remediations on Cisco switches, firewalls, Linux appliances, VMware vSphere.
• Balance operational demands with time-bound deliverables.
• Administer Illumio network micro-segmentation.
• IAM/PAM using BeyondTrust for remote access.
• Experience with HIPAA SRAs, penetration test findings remediation.
• Azure RBAC review and Active Directory hardening.
• Support 24/7 platform reliability, including patching cycles.
• Lead monthly patching and zero-day response.
• Harden network edge security with NGFW, SD-WAN, NAC.
• Manage wireless security using Cisco/Wireless and ClearPass.
• Patching and updates across enterprise.
• Proficient in firewalls and security appliances.
• Strong TCP/IP, routing, switching, cloud security knowledge.
• Experience with IDS/IPS, EDR, scripting (Python/PowerShell).

Responsibilities

• Provide security hardening of systems, networks, and cloud infra.
• Remediate findings from tests, SRAs, and HIPAA assessments within SLAs.
• Manage security tools for edge protections including NGFW and SD-WAN.
• Administer Illumio micro-segmentation and IAM/PAM tooling.
• Lead monthly patching cycles and rapid zero-day response across environments.
• Support 24/7 platform reliability and access controls.
• Configure and maintain firewall rules and network security appliances.

Education

BA degree in Computer Science, Information Technology, or Cybersecurity

Tools

Illumio

BeyondTrust

Palo Alto

Fortinet

Cisco Meraki

VMware vSphere

HPE Aruba ClearPass

Job description

Flybridge Staffing is currently seeking a Network Security Engineer for a client based in the Boca Raton area. This is a contract-to-hire role that works on a hybrid schedule. This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization's on-premises and hybrid infrastructure. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments are completed on schedule.

Experience/responsibilities:

• BA degree in Computer Science, Information Technology, or Cybersecurity, and 5 years of experience preferred.
• Must have experience with Security hardening of systems, networks, and Cloud infrastructure tools.
• Hands-on experience with both on-premises and cloud infrastructure platforms, including vulnerability management, patch management, and OS hardening across Windows and/or Linux server environments.
• Experience with PKI/SSL certificate lifecycle management and IAM/PAM tools (e.g., BeyondTrust or equivalent).
• Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs
• Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere).
• Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables.
• Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning.
• Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls.
• Experience supporting audit and compliance remediation cycles, such as HIPAA assessments, SRAs, or penetration test findings.
• Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices.
• Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours.
• Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments.
• Review and administer security tools to harden network edge security, including next-generation firewalls, SD-WAN, and switching, striving for zero trust networks.
• Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass.
• Patching: Handles the deployment of security patches and system updates across the enterprise.
• Proficiency with firewalls and network security appliances (Palo Alto, Fortinet, Cisco Meraki, Cisco switches), SD-WAN/next-generation firewall administration, and wireless security/NAC (Cisco wireless, HPE Aruba ClearPass).
• Strong understanding of TCP/IP routing, switching, network protocols, and cloud security.
• Experience with IDS/IPS, firewalls (e.g., Palo Alto, Cisco), and EDR platforms.
• Experience with scripting languages (e.g., Python, PowerShell) for automation.

****NO SPONSORSHIP AVAILABLE**** US Citizen, GC, only please.