Network Security Engineer

Boston IT Services Inc; Boston (MA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Boston IT Services Inc. (BITS) is seeking a Network Security Engineer to lead client networks in the Greater Boston area. You will design, deploy, and optimize office and lab networks, working with Fortinet and Meraki firewalls, VPNs, and WiFi.

You will coordinate with MDR vendors and compliance teams to maintain security posture and resiliency. The role involves designing network solutions, performing site-to-site VPNs into AWS/Azure, and centralizing runbooks and diagrams.

Qualifications

• 5+ years of hands-on networking (routing, switching, VPN, firewalls, WiFi).
• Experience with Meraki or Fortinet.
• Exposure to MDR platforms like SentinelOne or CrowdStrike.
• Zero trust VPN configurations.
• Ability to own networks across a diverse client base.

Responsibilities

• Design and deploy office and lab networks, including WiFi coverage modeling and VLAN segmentation.
• Manage Fortinet and Cisco Meraki firewalls end to end, including HA and dual-WAN failover.
• Support network vulnerability management, failover testing and monitoring with MDR/security teams.
• Track latency and packet loss; optimize network and WiFi performance.
• Install and manage office devices, AV setups, conference systems, and NAS devices.
• Maintain network diagrams, asset records, and runbooks; drive refresh roadmaps.

Skills

Networking

Firewalls

VPN

WiFi

Zero Trust VPN

Client-facing

Tools

Meraki

Fortinet

SentinelOne

CrowdStrike

Cloudflare

AWS

Azure

M365

Job description

Network Security Engineer | Boston IT Services (BITS)

Greater Boston · on-site / client sites / flexible hybrid workweek

Tired of being one ticket in a big queue? At BITS, you'll be the network lead for our client base, including biotech labs, manufacturers, fast-growing SaaS startups, architecture firms and nonprofits. Every environment is different, and every one will be better because you touched it.

We're a close-knit Boston team of about 20 consultants and a trusted IT and cybersecurity partner for over two decades. We pride ourselves on strong client relationships, and we're good at what we do.

What you'll own:

• Designing and deploying office and lab networks, from WiFi coverage modeling to VLAN segmentation
• Fortinet and Cisco Meraki firewalls end to end, including HA pairs and dual-WAN failover
• Understanding of network and endpoint security working with our MDR vendors and compliance teams, assist with network vulnerability management, failover testing and monitoring
• Tracking down latency and packet loss. Network and wifi optimization
• Manage, monitor and install standard connected office devices, AV setup and monitoring, including displays, cameras, mics and standard conference systems, Ubiquity / UniFi and Synology/QNAP NAS devices
• Own network monitoring, health reviews and refresh roadmaps including keeping network diagrams, asset records and creating runbook/troubleshooting guides
• Drive projects like office moves, hardware refreshes, integrations and Zero Trust VPN rollouts
• Serving as the client-facing liason who explains tradeoffs in plain English
• Coordinate vendors such as ISPs, cabling contractors and building management
• Spec and quote hardware, manage licensing renewals and lifecycle
• Install hardware at client sites, including racking and stacking and organization and cleanup of network facilities
• Manage site to site VPNs into AWS and Azure
• Infrequent after hours maintenance windows and emergency responses are required to support the team as the dedicated escalation point for network related questions and issues

You bring:

5+ years of hands-on networking (routing, switching, VPN, firewalls, WiFi), experience with Meraki or Fortinet, some exposure to MDR platforms like SentinelOne or CrowdStrike, and real enjoyment of working alongside clients. Zero trust VPN config such as Cloudflare and knowledge and conference room technology troubleshooting experience is a big plus. You're ready to own networks across a diverse client base.

Why BITS: real ownership, constant variety, a modern stack (Meraki, Fortinet, Cloudflare, AWS, SentinelOne, CrowdStrike, M365, etc etc etc), and a team that genuinely enjoys working together.

#NetworkEngineer #Cybersecurity #BostonJobs #Hiring #Fortinet #Meraki