Network Security Engineer

KPG99 INC; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

KPG99 INC seeks a hands-on Network Security Engineer to design, implement, and support secure, scalable network infrastructure across on-premises and cloud environments. You will strengthen security controls, monitor posture, and drive improvements while collaborating with IT and security teams.

The ideal candidate blends networking and cybersecurity expertise, can architect solutions, troubleshoot complex issues, and contribute across multiple teams.

Qualifications

• 5+ years of experience in network engineering or related infrastructure role.
• Strong understanding of TCP/IP, BGP, OSPF, MPLS, VPN, SD-WAN, routing, and switching.
• Hands-on experience with routers, switches, firewalls, and load balancers.
• Experience administering Check Point, Versa SD-WAN, Forcepoint, Imperva, and Qualys environments.
• Knowledge of Azure security services and overall cloud networking security.

Responsibilities

• Design, implement, and support enterprise network infrastructure including LAN/WAN/VPN/SD-WAN and cloud networking.
• Configure and manage firewall, NAC, segmentation, and remote access technologies.
• Lead network and security projects from planning to operation.
• Collaborate with Infrastructure, Cloud, SOC, and App teams to integrate security.
• Manage lifecycle of network and security platforms: upgrades, patching, config mgmt.
• Monitor performance, availability, and security posture; remediate issues.
• Evaluate new technologies to enhance reliability, scalability, security, and efficiency.
• Work with vendors and partners to align with industry best practices.
• Maintain network and security documentation, diagrams, and procedures.
• Ensure compliance with policies and regulatory standards.
• Participate in incident response, root cause analysis, and problem mgmt.

Skills

5+ years experience

Networking fundamentals

TCP/IP

BGP

OSPF

MPLS

VPN technologies

SD-WAN

Firewall management

Load balancing

Security monitoring

Incident response

Vendor collaboration

Tools

Check Point Firewalls

Versa SD-WAN

Forcepoint

Imperva

Qualys

Azure Security Services

Microsoft Security Center

CyberArk

Azure Cloud Networking

Job description

Here is the Job description – qualys is still required

We are seeking a hands-on Network Security Engineer to design, implement, and support secure, scalable network infrastructure across on-premises and cloud environments. This role requires a strong blend of networking and cybersecurity expertise, with responsibility for maintaining highly available network services, strengthening security controls, and driving continuous improvement initiatives. The ideal candidate is equally comfortable architecting solutions, troubleshooting complex issues, and collaborating across IT and security teams.

Key Responsibilities

• Design, implement, and support enterprise network infrastructure including LAN, WAN, VPN, SD-WAN, and cloud networking environments.
• Configure, manage, and optimize network security technologies including firewalls, network access controls, segmentation platforms, and secure remote access solutions.
• Lead network and security infrastructure projects from planning and design through implementation, testing, documentation, and operational support.
• Partner closely with Infrastructure, Cloud, Security Operations (SOC), and Application teams to ensure security is integrated into all aspects of the technology environment.
• Manage the lifecycle of network and security platforms, including upgrades, patching, configuration management, and performance optimization.
• Monitor network performance, availability, and security posture; proactively identify and remediate vulnerabilities, risks, and operational issues.
• Evaluate emerging technologies and recommend solutions that improve reliability, scalability, security, and operational efficiency.
• Collaborate with vendors, service providers, and technology partners to support strategic initiatives and maintain awareness of industry best practices.
• Maintain detailed network and security documentation, including diagrams, configurations, standards, and operational procedures.
• Ensure compliance with organizational policies and applicable regulatory, security, and industry standards.
• Participate in incident response, root cause analysis, and problem management activities related to network and security events.

Required Qualifications

• 5+ years of experience in Network Engineering, Network Security Engineering, or a related infrastructure role.
• Strong understanding of networking fundamentals including TCP/IP, BGP, OSPF, MPLS, VPN technologies, SD-WAN, routing, and switching.
• Hands-on experience configuring and supporting enterprise routers, switches, firewalls, and load balancing technologies.
• Experience administering and supporting the following technologies:
• Check Point Firewalls
• Versa SD-WAN / VPN
• Forcepoint
• Imperva
• Qualys
• Microsoft Azure Security Services
• Microsoft Security Center
• CyberArk
• Experience supporting Azure cloud networking and security services.
• Strong knowledge of network security principles including firewalls, IDS/IPS, Zero Trust, VPNs, segmentation, identity management, and threat prevention.
• Experience with network monitoring, visibility, and policy management platforms such as SolarWinds and Tufin.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills with the ability to work effectively across technical and business teams.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Preferred Qualifications

• Experience with micro-segmentation technologies such as Illumio.
• Experience supporting hybrid cloud environments.
• Knowledge of automation and Infrastructure-as-Code tools.
• Industry certifications such as CCNP, CCIE, CISSP, PCNSE, CCSA, or equivalent.