Network Security Engineer

Intone Networks Inc.; Northern, New York (KY, NY); Hybrid; USD 96,000 - 165,000; Full time

Job summary

Intone Networks Inc. seeks a Network Security Engineer for a 6+ month contract in Midtown, New York.

The role focuses on designing, implementing, and maintaining robust security across diverse IT environments, ensuring confidentiality, integrity, and availability of data and systems. You will work with cutting-edge security technologies, influence security policies, and respond proactively to emerging threats, with responsibilities spanning vulnerability assessments, threat detection, and

Qualifications

• Experience designing, implementing, and maintaining network security across diverse IT environments.
• Proficiency with Cisco ASA firewalls, Cisco ISE, IDS/IPS, and VPN solutions.
• Experience performing vulnerability assessments and penetration testing.
• Knowledge of SIEM tools such as Splunk and SolarWinds.
• Familiarity with system hardening on Linux, Windows, macOS, and UNIX variants.
• Understanding of encryption protocols IPsec, SSL/TLS, PKI, and FIPS standards.
• Knowledge of NIST and ISO 27000 standards.
• Experience with AWS and Google Cloud Platform.
• FISMA and FedRAMP compliance requirements.

Responsibilities

• Develop and enforce network security strategies aligned with NIST/ISO 27000.
• Configure and manage Cisco ASA, Cisco ISE, IDS/IPS, and VPN solutions.
• Conduct vulnerability assessments and penetration testing across LAN/WAN/SAN and cloud environments (AWS, GCP).
• Monitor traffic using SIEM tools (Splunk, SolarWinds) and perform log analysis.
• Implement system hardening for Linux, Windows, macOS, and UNIX variants.
• Manage encryption protocols (IPsec, SSL/TLS, PKI, FIPS) for data in transit and at rest.
• Lead incident recovery with DR plans, security plans, and threat detection per FISMA/FedRAMP.

Skills

Network security design

Cisco ASA firewalls

Cisco ISE

IDS/IPS

VPN solutions

Vulnerability assessments

Penetration testing

SIEM (Splunk, SolarWinds)

System hardening

Encryption protocols (IPsec, SSL/TLS,

PKI

FIPS standards

NIST/ISO 27000

AWS/GCP

FISMA/FedRAMP

Tools

Cisco ASA

Cisco ISE

IDS/IPS systems

VPN solutions

Splunk

SolarWinds

Linux

Windows

macOS

UNIX variants

Job description

We are seeking a Network Security Engineer for a contract position (6+ months) based in Midtown, New York. In this role, you will be responsible for designing, implementing, and maintaining robust network security measures across diverse IT infrastructure environments. Your expertise will ensure the confidentiality, integrity, and availability of organizational data and systems. This position offers an opportunity to work with cutting-edge security technologies, influence security policies, and respond proactively to emerging threats.

Responsibilities

• Develop and enforce comprehensive network security strategies aligned with industry standards such as NIST and ISO 27000 to protect organizational assets.
• Configure and manage network security devices including Cisco ASA firewalls, Cisco ISE for identity management, IDS/IPS systems for threat detection, and VPN solutions for secure remote access.
• Conduct vulnerability assessments and penetration testing to identify potential weaknesses within LAN, WAN, SAN, and cloud infrastructure environments such as AWS and Google Cloud Platform.
• Monitor network traffic using SIEM tools such as Splunk or SolarWinds to detect suspicious activities, perform log analysis, and initiate incident response procedures.
• Implement system hardening techniques on operating systems including Linux (Debian, CentOS, Ubuntu), Windows, macOS, and UNIX variants to minimize attack surfaces.
• Manage encryption protocols such as IPsec, SSL/TLS, PKI (Public Key Infrastructure), and FIPS standards to secure data in transit and at rest across diverse platforms.
• Lead incident recovery efforts by executing disaster recovery plans, system security plans, and threat detection and response strategies in accordance with FISMA and FedRAMP compliance requirements.

Qualifications

• Experience with network security design, implementation, and maintenance across diverse IT infrastructure environments.
• Proficiency with Cisco ASA firewalls, Cisco ISE, IDS/IPS systems, and VPN solutions.
• Experience conducting vulnerability assessments and penetration testing.
• Knowledge of SIEM tools such as Splunk or SolarWinds.
• Familiarity with system hardening on Linux (Debian, CentOS, Ubuntu), Windows, macOS, and UNIX variants.
• Understanding of encryption protocols including IPsec, SSL/TLS, PKI, and FIPS standards.
• Knowledge of industry standards such as NIST and ISO 27000.
• Experience with cloud infrastructure environments such as AWS and Google Cloud Platform.
• Familiarity with FISMA and FedRAMP compliance requirements.