Network Security Operations Engineer

EPAM Systems; United States; Remote; USD 90,000 - 150,000; Full time

Benefits offered by this job

Fortinet certification (nice to have)

Cisco CCNA/CCNP Security (nice to have

Job summary

EPAM Systems is seeking a Network Security Operations Engineer to partner with Infrastructure, Security, Platform, Application and Operations teams to strengthen the security of our technology landscape across on-prem, cloud, data center, office, and retail environments.

You will drive network segmentation, firewall governance, vulnerability management, PAM/MFA controls, and end-user credential security, while supporting hardening initiatives and secure remote administration across hybrid

Qualifications

• Bachelor's degree or equivalent practical experience in Information Technology, Cyber Security, CS, or Engineering.
• 3+ years of experience in Network Security, Security Operations, or related field.
• Experience with enterprise network technologies including routing, switching, LAN/WAN.
• Proficiency with VPN, wireless networking, and network segmentation.
• Experience managing firewalls, firewall policies, and security zones (ACLs, controls).
• Familiarity with PAM, MFA, break-glass processes and credential management.
• Knowledge of CIS Benchmarks and secure baseline practices.
• Understanding of cloud security principles and hybrid environments.
• Experience with security monitoring, logging, SIEM, and incident investigations.

Responsibilities

• Collaborate with multiple teams to implement secure network architectures and cybersecurity controls.
• Support design, implementation, and maintenance of network segmentation and secure remote administration solutions.
• Manage firewall governance activities including rule reviews and remediation of obsolete rules.
• Drive vulnerability management initiatives and track high-risk findings to closure.
• Participate in hardening initiatives across network devices, servers, endpoints, and cloud platforms.
• Identify and remediate risks for End-of-Life systems through segmentation and compensating controls.
• Develop and maintain security documentation, procedures, standards, and designs.
• Act as SME for network security technologies and share knowledge across teams.
• Provide operational support and leadership during security projects, audits, investigations, and compliance.

Skills

Network security

Security operations

VPN

Network segmentation

Firewall governance

SIEM

Incident investigation

Technical communication

Education

Bachelor's degree in Information Technology, Cyber Security, Computer Science, Engineering

Tools

SIEM platforms

VPN technologies

Cloud security platforms

Job description

We are looking for a Network Security Operations Engineer to partner across Infrastructure, Security, Platform, Application, and Operations teams to strengthen the confidentiality, integrity, and availability of our technology landscape. The role will be instrumental in delivering key cybersecurity initiatives related to network segmentation, firewall governance, vulnerability management, endpoint protection, credential security, hardening, and end-of-life (EOL) remediation across on-premises, cloud, data center, office, warehouse, and retail environments. The Network Security Operations Engineer will be a proactive and self-motivated security professional responsible for supporting and executing security improvement programs, operational controls, and remediation activities across network infrastructure, servers, endpoints, applications, and cloud platforms. The role requires close collaboration with business and technology stakeholders to implement sustainable security controls while maintaining operational stability.

Responsibilities

• Collaborate with Infrastructure, Security, IAM, Platform, and Application teams to implement and maintain secure network architectures and cybersecurity controls
• Support the design, implementation, and maintenance of network segmentation, privileged access pathways, and secure remote administration solutions
• Manage firewall governance activities, including firewall rule reviews, risk assessments, remediation of obsolete rules, and validation of business requirements for network access
• Drive vulnerability management initiatives by validating scan coverage, coordinating remediation activities, tracking high-risk vulnerabilities, and ensuring closure of security findings
• Participate in hardening initiatives by defining, implementing, and enforcing security baselines across network devices, servers, endpoints, and cloud platforms
• Identify, assess, and remediate risks associated with End-of-Life (EOL) systems through segmentation, monitoring, privileged access restrictions, and compensating controls
• Develop and maintain security documentation, operational procedures, standards, and technical designs
• Act as a subject matter expert for network security technologies, controls, and best practices and share knowledge across technical teams
• Provide operational support and technical leadership during security projects, audits, investigations, and compliance activities

Requirements

• Bachelor's degree in Information Technology, Cyber Security, Computer Science, Engineering, or equivalent practical experience
• 3+ years of experience in Network Security, Security Operations, Infrastructure Security, or a related field
• Background in enterprise network technologies, including routing, switching, and LAN/WAN
• Proficiency in VPN, wireless networking, and network segmentation
• Expertise in managing firewalls, firewall policies, and security zones, including access control lists (ACLs) and network security controls
• Skills in supporting vulnerability management programs, security remediation initiatives, and security compliance activities
• Familiarity with privileged access management (PAM), multi-factor authentication (MFA), and break-glass processes, as well as identity security and credential management
• Knowledge of security hardening frameworks such as CIS Benchmarks and secure baseline management
• Understanding of cloud security principles and hybrid infrastructure environments
• Competency in security monitoring, logging, and SIEM platforms, along with incident investigation
• Strong troubleshooting and analytical skills with the capability to diagnose complex network and security issues end-to-end
• Excellent communication skills in English (C1 level) with the ability to work effectively across technical and business teams, combined with strong prioritization, risk-management, and problem-solving capabilities

Nice to have

• Relevant certifications such as Fortinet, Cisco CCNA/CCNP Security, or equivalent