Network Security Engineer Need Local

ComTec Information Systems (IT); City of Albany (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

ComTec Information Systems (IT) seeks an experienced Network Security Architect to lead architecture, design, and optimization of enterprise security solutions. You will act as a technical SME for Juniper SRX, Palo Alto, and Cisco firewalls, and configure Juniper switches with Junos CLI and security zones.

You will design secure routing with BGP/OSPF, manage firewall policies and VPNs, and guide complex migrations.

Qualifications

• 6+ years of hands-on experience designing, implementing, and supporting enterprise network and security infrastructure.
• Experience with Juniper SRX firewalls, including Junos CLI, security zones, firewall policies, NAT, and high availability.
• Strong hands-on experience with Juniper switches in enterprise environments.
• Strong experience with Palo Alto firewalls; Palo Alto expertise is highly preferred.
• Extensive knowledge of BGP, OSPF, and other dynamic routing protocols.
• Experience with IPSec site-to-site and remote-access VPN solutions.
• Strong understanding of network security architecture, integration, risk assessment, and security best practices.
• Experience supporting Cisco switching and routing infrastructure.
• Proven ability to troubleshoot complex network and security issues in enterprise environments.
• Strong technical documentation and Visio diagramming skills.
• Excellent communication, collaboration, and stakeholder-management skills.

Responsibilities

• Lead the architecture, design, implementation, and optimization of complex enterprise network security solutions.
• Serve as a technical SME for Juniper SRX, Palo Alto, and Cisco firewalls.
• Configure, manage, optimize, and troubleshoot Juniper switches and firewalls, including Junos CLI and security zones.
• Design and implement secure routing using BGP, OSPF, and other dynamic routing protocols.
• Configure and maintain firewall policies, NAT, security zones, IDP/IPS, UTM, and high-availability firewall environments.
• Deploy and support site-to-site IPSec and remote-access VPN solutions.
• Support and troubleshoot Cisco switching and routing infrastructure.
• Gather security requirements, conduct risk assessments, and contribute to enterprise network security architecture.
• Lead network security upgrades, migrations, and complex implementation projects.
• Troubleshoot and resolve critical network and security incidents.
• Mentor junior and mid-level network/security engineers and provide technical guidance.
• Develop and maintain network diagrams, architecture documentation, configuration standards, and operational procedures.
• Collaborate with security, infrastructure, application, and business teams to ensure secure and reliable network operations.
• Identify opportunities to automate network and security configuration using Python, Ansible, or Terraform.

Skills

Juniper SRX

Palo Alto

Cisco switches

BGP

OSPF

Firewall policies

VPN technologies

Python

Ansible

Terraform

Network security architecture

Risk assessment

Visio documentation

Technical communication

Tools

Junos CLI

Visio

Job description

• Lead the architecture, design, implementation, and optimization of complex enterprise network security solutions.
• Serve as a technical SME for Juniper SRX, Palo Alto, and Cisco firewalls.
• Configure, manage, optimize, and troubleshoot Juniper switches and firewalls, including Junos CLI and security zones.
• Design and implement secure routing using BGP, OSPF, and other dynamic routing protocols.
• Configure and maintain firewall policies, NAT, security zones, IDP/IPS, UTM, and high-availability firewall environments.
• Deploy and support site-to-site IPSec and remote-access VPN solutions.
• Support and troubleshoot Cisco switching and routing infrastructure.
• Gather security requirements, conduct risk assessments, and contribute to enterprise network security architecture.
• Lead network security upgrades, migrations, and complex implementation projects.
• Troubleshoot and resolve critical network and security incidents.
• Optimize firewall rules and security policies to improve security, performance, and operational efficiency.
• Mentor junior and mid-level network/security engineers and provide technical guidance.
• Develop and maintain network diagrams, architecture documentation, configuration standards, and operational procedures.
• Collaborate with security, infrastructure, application, and business teams to ensure secure and reliable network operations.
• Identify opportunities to automate network and security configuration using Python, Ansible, or Terraform.

Key Responsibilities

• Lead the architecture, design, implementation, and optimization of complex enterprise network security solutions.
• Serve as a technical SME for Juniper SRX, Palo Alto, and Cisco firewalls.
• Configure, manage, optimize, and troubleshoot Juniper switches and firewalls, including Junos CLI and security zones.
• Design and implement secure routing using BGP, OSPF, and other dynamic routing protocols.
• Configure and maintain firewall policies, NAT, security zones, IDP/IPS, UTM, and high-availability firewall environments.
• Deploy and support site-to-site IPSec and remote-access VPN solutions.
• Support and troubleshoot Cisco switching and routing infrastructure.
• Gather security requirements, conduct risk assessments, and contribute to enterprise network security architecture.
• Lead network security upgrades, migrations, and complex implementation projects.
• Troubleshoot and resolve critical network and security incidents.
• Optimize firewall rules and security policies to improve security, performance, and operational efficiency.
• Mentor junior and mid-level network/security engineers and provide technical guidance.
• Develop and maintain network diagrams, architecture documentation, configuration standards, and operational procedures.
• Collaborate with security, infrastructure, application, and business teams to ensure secure and reliable network operations.
• Identify opportunities to automate network and security configuration using Python, Ansible, or Terraform.

Required Qualifications

• 6+ years of hands-on experience designing, implementing, and supporting enterprise network and security infrastructure.
• experience with Juniper SRX firewalls, including Junos CLI, security zones, firewall policies, NAT, and high availability.
• Strong hands-on experience with Juniper switches and enterprise switching environments.
• Strong experience with Palo Alto firewalls; Palo Alto expertise is highly preferred.
• Extensive knowledge of BGP, OSPF, and other dynamic routing protocols.
• Strong experience with firewall policies, rule optimization, IDP/IPS, UTM, NAT, and VPN technologies.
• Experience with IPSec site-to-site and remote-access VPN solutions.
• Strong understanding of network security architecture, integration, risk assessment, and security best practices.
• Experience supporting Cisco switching and routing infrastructure.
• Proven ability to troubleshoot complex network and security issues in enterprise environments.
• Strong technical documentation and Visio diagramming skills.
• Excellent communication, collaboration, and stakeholder-management skills.