Network Security Engineer

Motion Recruitment; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Motion Recruitment is seeking a Network Security Engineer for a 12-month contract in Irving, TX, with an onsite schedule. The role covers all aspects of network security, including firewall governance, VPN management, and WAF administration.

You will work with senior engineers to define security requirements, implement controls, and support security operations while coordinating with development and engineering teams to mitigate risks.

Qualifications

• Bachelor’s degree in related field, Master’s preferred, or equivalent experience
• 3-5 years of network security engineering experience
• 5 years of related experience with Bachelor’s, 3 years with Master’s

Responsibilities

• Be a key player on a team responsible for all aspects of Network Security within company.
• Manage firewalls and network filters in Enterprise, Stores, and cloud networks.
• Plan, configure, and migrate site-to-site VPN tunnels; troubleshoot VPN connectivity issues.
• Administer Imperva WAF deployments and tune policies.
• Provide advanced troubleshooting for Palo Alto GlobalProtect VPN services.
• Participate in security assessments, vulnerability remediation, and infrastructure modernization efforts.

Skills

Network security engineering

TCP/IP

Routing & Switching

VPN

Education

Bachelor’s degree in related field

Master’s degree preferred

Tools

Palo Alto

GlobalProtect

Imperva WAF

Job description

NO C2C or 3rd Party Candidates Please! Must be W2

Our client is seeking a Network Security Engineer for a 12-month contract in Irving, TX. Will be working on an onsite schedule.

Contract Duration: 12 Months

Required Skills & Experience

• Bachelor’s degree in related field, Master’s preferred, or equivalent experience
• 3-5 years of network security engineering experience
• 5 years of related experience with Bachelor’s, 3 years with Master’s
• Experience with Palo Alto firewalls, site-to-site VPNs, GlobalProtect, and Imperva WAF
• Strong understanding of TCP/IP, routing, switching, DNS, SSL/TLS, and security principles
• Strong troubleshooting and documentation skills

Certification/Licenses

• Must have: At least one entry-level vendor certification (with non-entry-level preferred) in the Network Security arena (Palo Alto PCNSA/PCNSE preferred, Cisco CCNA/CCNP Security, Juniper JNCIA-SEC/JNCIS-SEC, etc.) or equivalent experience

Desired Skills & Experience

• At least one entry-level vendor-neutral certification in the Information Security arena (GICF, GSEC, CISA, CEH, etc.)
• Convenience Retail, Fuel Operations, Supply Chain

What You Will Be Doing

• Will be a key player on a team responsible for all aspects of Network Security within company. You may be a SME in some domains, but are expected to have full professional knowledge of security concepts and company objectives to resolve a wide range of issues in effective and sometimes creative ways, in all of the following domains. As an advanced engineer, you are expected to do these things with little technical direction and with only general guidance on new assignments:
• Firewalls and network filters, in both Enterprise, Stores, and cloud networks
• Site-to-site and remote-access VPN connectivity
• Network Access Control
• Authentication, Authorization and Accounting (to include multi-factor authentication)
• Web access proxy servers and URL filtering
• DNS Security
• Threat research, vulnerability remediation, and creation of compensating controls
• Network Security policy creation, exception documentation and approval
• Provide suggestions to team lead/manager in creating your professional development and training plan.
• Prioritize taskings and projects assigned based on importance to accomplishment of business objectives. Occasionally assist junior teammates with maintaining proper prioritization.
• Solve diverse and complex issues where analysis of situations and data requires in-depth evaluation of identifiable factors. Provide escalation support and technical guidance to teammates in areas where you are a SME.
• Work on projects assigned to you, in effort to advance partnership opportunities between Network Security team and other business areas.
• Work with senior engineers to define network security requirements for current and future state end-to-end architectures and platforms to advance security controls and the security posture of the business.
• Assist senior engineers in collaborating with development and engineering teams to prioritize security risks, provide mitigation or remediation recommendations, and implement compensating controls.
• Perform network security architecture and third-party risk management reviews.
• Perform network security platform testing, vulnerability remediation, and operating system hardening to reduce attack surface.
• Assist in performing proof-of-concept testing for network security solutions under consideration for purchase and implementation.
• Assist in developing and maintaining network security policies, standards, processes and workflows.
• Work with senior engineers in identifying network security products and technologies that can enhance company’s mission by providing appropriate protection for all data on the network, or sent or received to/from various public or private clouds, or the Internet at large.

Firewall Governance & Administration

• Manage enterprise firewall environments and enforce network security policies. Perform firewall rule reviews, cleanup initiatives, and remediation activities. Conduct regular audits of firewall configurations and access controls.
• Firewall Standards & Documentation
• Develop, maintain, and update firewall standards, procedures, network security diagrams, and architecture documentation.

Site-to-Site VPN Management

• Plan, configure, and migrate site-to-site VPN tunnels. Troubleshoot VPN connectivity issues and validate configurations.

Web Application Firewall (Imperva)

• Administer and optimize Imperva WAF deployments, expand coverage, analyze events, and tune policies.

Remote Access & GlobalProtect Support

• Provide advanced troubleshooting and support for Palo Alto GlobalProtect VPN services.

Security Operations & Continuous Improvement

• Participate in security assessments, incident response activities, vulnerability remediation, and infrastructure modernization efforts.