Senior Information Security Engineer

Rekruitd; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Rekruitd is seeking a hands-on Senior Information Security Engineer to strengthen our enterprise network and cloud security posture. You will design and implement security controls across networks, cloud platforms, servers, endpoints, and identity systems while actively building practical solutions.

You will lead segmentation initiatives, deploy Next-Generation Firewalls, ZTNA, NAC, MFA, and SSO, and work with cross-functional teams to improve risk management, incident response, and security

Qualifications

• We require 8+ years in Information Security Engineering or similar enterprise security roles.
• Strong network security experience with firewalls, VPN/ZTNA, NAC, EDR, and SIEM.
• Experience designing and implementing network segmentation or micro-segmentation.
• Knowledge of Zero Trust, least-privilege, and cloud/on‑prem security.
• Experience securing identity, access, and application security.
• Hands-on ability to implement and support security controls and documentation.

Responsibilities

• Design and implement security controls across enterprise networks, cloud, servers, and endpoints.
• Lead network segmentation and micro-segmentation initiatives across cloud and on-prem.
• Implement segmentation with firewalls, VLANs, identity-based controls, and policy tooling.
• Provide hands-on expertise with firewalls, VPN, ZTNA, NAC, MFA, SSO/federation, and secure remote access.
• Partner with security, network, and cloud teams to shape security architecture.
• Deploy and support EDR, SIEM integrations, vulnerability management, and security platforms.
• Assess risks of new systems and vendors; coordinate remediation with teams.
• Support incident detection/response and develop playbooks for security events.
• Develop and maintain security standards, docs, and operating procedures.
• Explore technologies that improve segmentation, visibility, and protection.

Skills

Security architecture

Network security

MFA / IAM

Security documentation

Education

Bachelor's degree in CS/IS/Engineering or equivalent

CISSP, CCNP Security, CCSP or similar

Tools

Firewalls

VPN

ZTNA

NAC

EDR

SIEM

Vulnerability Management

SSO/Federation

Job description

We are seeking a hands-on Senior Information Security Engineer with strong experience in enterprise and network security. This role will focus heavily on network segmentation, Zero Trust, secure connectivity, identity, cloud security, and endpoint protection across a complex enterprise environment.

The ideal candidate has a strong network security foundation and is comfortable both designing security solutions and working hands-on to implement and support them.

Key Responsibilities

• Design and implement security controls across enterprise networks, cloud platforms, servers, endpoints, applications, and identity environments.
• Lead and support network segmentation and micro segmentation initiatives across cloud and on-premises infrastructure.
• Implement segmentation using next-generation firewalls, VLANs, identity-based controls, and other policy-driven technologies.
• Provide hands-on expertise with firewalls, VPN, ZTNA, NAC, conditional access, MFA, SSO/federation, and secure remote access.
• Partner with network, infrastructure, cloud, application, and security teams on security architecture and technical solutions.
• Implement and support enterprise security technologies including EDR, SIEM integrations, vulnerability management, and network security platforms.
• Assess security risks associated with new systems, integrations, vendors, and technologies and recommend appropriate controls.
• Support incident detection and response activities and help develop procedures for investigating and responding to security events.
• Identify infrastructure and platform vulnerabilities and work with technical teams to coordinate remediation.
• Develop and maintain security standards, technical documentation, configuration guidelines, and operating procedures.
• Evaluate security technologies that improve segmentation, access control, visibility, and enterprise protection.
• Implement and manage application allowlisting/default-deny security solutions such as ThreatLocker, AppLocker, Airlock, or similar technologies, including policy configuration, exceptions, ringfencing, and EDR/SIEM integration.
• Provide technical guidance and security best-practice recommendations across engineering and infrastructure teams.

Required Experience

• 8+ years of hands-on Information Security Engineering, Network Security Engineering, or similar enterprise security experience.
• Strong enterprise network security experience, including firewalls, secure remote access, VPN/ZTNA, NAC, EDR, and SIEM technologies.
• Hands-on experience designing and implementing network segmentation or micro segmentation in enterprise environments.
• Experience with firewall-based, software-defined, identity-based, or similar segmentation approaches.
• Strong knowledge of Zero Trust architecture and least-privilege security principles.
• Experience securing cloud and on-premises environments.
• Strong knowledge of identity and access security, including MFA, SSO/federation, conditional access, and authentication technologies.
• Hands-on experience implementing application allowlisting/default-deny technology, such as ThreatLocker, AppLocker, Airlock, or an equivalent enterprise solution.
• Broad experience securing enterprise applications, infrastructure, SaaS platforms, endpoints, and network environments.
• Strong understanding of network security architecture and routing/switching fundamentals.
• Experience working with firewalls, SIEM, EDR, vulnerability management, and other security platforms.
• Strong communication and documentation skills with the ability to work across networking, infrastructure, cloud, application, operations, and security teams.

Preferred Qualifications

• Experience supporting manufacturing, industrial, or plant environments, particularly security between corporate IT and operational technology (OT) environments.
• CISSP, CCNP Security, CCSP, or similar security/network certification.
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline, or equivalent professional experience.

Candidates must be authorized to work in the United States without current or future sponsorship.