Role overview
Strengthen security across corporate networks, cloud infrastructure, identity, endpoints, email, and software-as-a-service environments. This hands-on engineering role has particular ownership of firewalls and secure connectivity, while partnering with infrastructure, DevOps, and IT teams to troubleshoot issues, respond to alerts, and improve security controls.
Responsibilities
- Administer and improve firewalls, VPNs, network segmentation, access policies, and connectivity between users, offices, cloud services, and third parties.
- Review and maintain firewall rules, remove unnecessary access, and follow change procedures that include testing, documentation, rollback planning, and post-change validation.
- Troubleshoot network and firewall issues and analyze traffic, logs, and alerts to support investigations.
- Help design secure network and cloud architectures, applying least-privilege access principles.
- Investigate security alerts and incidents, identify vulnerabilities or configuration gaps, and coordinate remediation with technology owners.
- Support security monitoring, assessments, project integrations, automation, and technical evidence for security frameworks.
Requirements
- Strong enterprise networking knowledge, including TCP/IP, routing, switching, DNS, DHCP, NAT, and VLANs.
- Hands-on experience administering enterprise firewalls and designing network access controls or segmentation.
- Experience with site-to-site and remote-access VPNs and network traffic analysis.
- Background in secure network architecture, cloud security, and incident troubleshooting.
- Experience with vulnerability management and remediation in a Microsoft enterprise environment.
- At least five years in systems administration, network infrastructure, or enterprise IT operations; practical experience is valued over specific certifications.
Nice to have
- Familiarity with Azure networking, Palo Alto, Fortinet, or Cisco technologies.
- Certifications such as PCNSA/PCNSE, FCP/FCSS, CCNA/CCNP, AZ-500, SC-200/SC-300, or Security+.
- Experience supporting SOC 2, CIS Controls, or ISO 27001-aligned practices.