Remote Senior Network Security Engineer: Zero-Trust & Segmentation

SANS; New York (NY); Remote; USD 120,000 - 160,000; Full time

Job summary

SANS is seeking a Sr. Network Engineer to lead hardening and modernization of our enterprise network infrastructure. This role focuses on auditing legacy configurations, enforcing strict segmentation, and guiding us toward a Zero-Trust architecture.

You will own firewall governance, decommission technical debt, and ensure alignment with internal GOIS mandates and external security standards across our global network.

Qualifications

• Must include governance of firewall rules and ACLs across global network.
• Experience implementing network segmentation and micro-segmentation strategies.
• Ability to decommission legacy infrastructure and migrate to modern platforms.

Responsibilities

• Audit and rationalize firewall rules and ACLs to remove redundant entries.
• Develop and enforce change procedures for firewall and ACL modifications.
• Design and implement segmentation strategies including VLANs and trust zones.
• Lead decommissioning of legacy networks and migration to standardized platforms.
• Maintain topology diagrams and ensure regulatory alignment.

Skills

Firewall governance

ACL management

Network segmentation

VLAN configuration

Zero Trust architecture

Regulatory compliance

Network documentation

Tools

Firewall platforms

ACL tooling

Network monitoring tools

Job description

SANS is seeking a Sr. Network Engineer to lead hardening and modernization of our enterprise network infrastructure. This role focuses on auditing legacy configurations, enforcing strict segmentation, and guiding us toward a Zero-Trust architecture.

You will own firewall governance, decommission technical debt, and ensure alignment with internal GOIS mandates and external security standards across our global network.