Senior Network Engineer

Planet Group; New York (NY); Remote; USD 200,579,000 - 221,931,000; Full time

Job summary

Planet Group is seeking a detail-oriented Senior Network Engineer to lead hardening and modernization of our enterprise network. You will own firewall governance, audit legacy configurations, and drive a transition toward Zero-Trust architecture across a global environment.

You will manage ACLs, implement robust segmentation with VLANs and governance policies, and oversee decommissioning of obsolete hardware while ensuring documentation and regulatory compliance with internal GOIS mandates.

Qualifications

• Experience auditing firewall rules and ACLs across a global enterprise.
• Experience with network segmentation and micro-segmentation.
• Experience designing VLANs and routing policies.
• Experience decommissioning legacy network segments and obsolete hardware.
• Knowledge of regulatory security standards and GOIS mandates.

Responsibilities

• Audit and rationalize firewall rules and ACLs globally.
• Develop and enforce firewall/ACL change procedures for security policy compliance.
• Evaluate and enhance network segmentation to minimize attack surface.
• Design and implement VLANs and routing policies for trust zones.
• Decommission legacy network segments and migrate OpNet infrastructure.
• Maintain topology diagrams and documentation for security changes.
• Ensure GOIS mandates and external standards compliance.

Skills

Firewall governance

ACL management

Network segmentation

Zero-Trust

VLANs & routing

Documentation

Regulatory compliance

Job description

Job Title: Senior Network Engineer

Location: Remote

Duration: 10 months

Schedule: 40 hrs/week

Pay Rate: $70/hr to $77.46/hr, DOE

Job Overview:

We are seeking a detail-oriented Network Security Engineer to lead the hardening and modernization of our enterprise network infrastructure. This role focuses on "cleaning the house"--systematically auditing legacy configurations, enforcing strict network segmentation, and transitioning our environment toward a Zero-Trust architecture. You will be responsible for the lifecycle of firewall governance, the decommissioning of technical debt, and ensuring that our global network remains compliant with institutional security mandates.

Key Responsibilities:

1. Firewall and ACL Governance
   • Audit & Rationalization: Systematically review and audit existing firewall rule sets and Access Control Lists (ACLs) across the global enterprise to eliminate redundant, outdated, or overly permissive entries.
   • Policy Management: Assist in developing and enforcing standardized management procedures for all firewall and ACL modifications, ensuring every change aligns with established security policies and compliance frameworks.
2. Network Segmentation & Isolation
   • Architectural Review: Evaluate and enhance network segmentation strategies--including micro-segmentation--to minimize the attack surface and prevent lateral movement by malicious actors.
   • Trust Zone Enforcement: Design and implement new VLANs and routing policies to ensure rigorous logical separation between diverse trust zones, including Student, Faculty, Research, IoT, and Administrative networks.
3. Legacy Infrastructure Decommissioning
   • Cleanup Operations: Identify and execute the orderly decommissioning of legacy network segments, unused VLANs, and obsolete hardware configurations.
   • Infrastructure Migration: Lead the remediation and consolidation of specialized networks, specifically focusing on the phase-out and migration of the OpNet infrastructure to modern, standardized platforms.
4. Documentation & Compliance
   • Topology Management: Maintain accurate, high-fidelity network topology diagrams and documentation for all security-related changes and segmentation schemes.
   • Regulatory Alignment: Validate that all network cleanup and security activities adhere strictly to internal GOIS (Global Office of Information Security) mandates and external regulatory standards.