Network Security Engineer

Phaxis; Providence (RI); On-site; USD 110,000 - 150,000; Full time

Job summary

Phaxis client, a growing financial firm in Mass, seeks a Network Security Engineer to design, implement, and maintain network security solutions to safeguard information assets. This role also deploys security groups, access controls, IDS/IPS, and third-party security monitoring.

Responsibilities include threat monitoring, incident response, audits remediation, vulnerability testing, and IAM management. The role requires strong Windows/Linux, cloud and scripting skills, with a focus on

Qualifications

• Experience in network security within financial services is preferred.
• On-prem Windows and Linux administration knowledge is required.
• Solid understanding of firewalls, IDS/IPS, VPNs, and network security technologies.
• Experience with cloud platforms (AWS/Azure/GCP) is a must.
• Proficient in scripting languages such as PowerShell, Python or Bash.
• Understanding of IAM solutions like OKTA, SAML and OpenID Connect.

Responsibilities

• Provide technical expertise to troubleshoot and resolve complex network security issues to minimize downtime.
• Monitor traffic for threats and respond to incidents with root cause analysis and corrective actions.
• Plan and engineer solutions addressing security findings from IT audits and client examinations.
• Conduct regular security assessments, vulnerability scans, and penetration testing.
• Manage Identity and Access controls and regularly review access permissions.
• Stay updated on emerging threats and best practices in network security.

Skills

Network security

Windows/Linux admin

Networking protocols

Cloud platforms

Scripting (PowerShell/Python/Bash)

Firewall/IDS/IPS/VPN

IAM (OKTA/SAML/OpenID)

TCP/IP & LAN fundamentals

Job description

Our client, a growing financial firm in Mass. Is looking for a Network Security Engineer to join the team. This role will be responsible to design, implement and maintain the network security solutions to safeguard the firms information assets. This role will also implement and maintain network security groups, access controls and intrusion detection/prevention systems as well as monitor third-party security solutions. This is a five-days-a-week onsite position.

Responsibilities

• Provide technical expertise in troubleshooting and resolving complex network security issues, ensuring minimal downtime.
• Monitor network traffic for signs of security threats and respond promptly to incidents conducting root cause analysis and implementing corrective actions.
• Plan and engineer solutions to solve existing threats and security issues, particularly, drive the remediation of any Security-related findings resulting from IT Audits and Client Examinations.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential system vulnerabilities.
• Maintain and manage Identity and Access controls, ensuring secure user and service account permissions and regularly review access controls to maintain a secure environment.
• Stay abreast of emerging security threats, industry best practices, and latest advancements in network security technologies and processes.

Qualifications

• Proven experience as a system network engineer or information security engineer with a focus on network security in the financial industry.
• Strong knowledge of on-prem system administration, including Windows and Linux environments
• Proficient in network protocols, routing, and switching technologies.
• Proficient in cloud platforms such as AWS, Azure or Google Cloud Platform.
• Experience with scripting languages such as PowerShell, Python or Bash
• Strong understanding of firewall configurations, intrusion detection/prevention systems, VPNs, and other network security technologies.
• Strong understanding of TCP/IP and IP addressing, LAN Technology including Ethernet and Ethernet switching, and routing fundamentals.
• In-Depth knowledge of Identity Access Management technologies such as OKTA and protocols, such as Auth0, SAML and OpenID Connect.