Senior Network Security Engineer - Automation & Resilience

Gasoc; Tucker (GA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Job summary

Georgia System Operations Corporation (GSOC) seeks a Network Security Engineer to design, deploy, and operate secure network services and cybersecurity tools across datacenter, campus, and edge environments. The role emphasizes VPNs, firewalls, DNS security, and automation to improve availability and visibility.

You will partner with SOC, infrastructure, and vendor teams, mentoring peers and driving change within established processes. This is an onsite role in Georgia with no visa sponsorship.

Qualifications

• Bachelor's degree or equivalent in IT, CS, Engineering, Cybersecurity or related field.
• 5+ years of progressive experience supporting enterprise network and network-security infrastructure, including switching, routing, firewall administration, VPN, wireless, and troubleshooting.
• Strong knowledge of enterprise LAN/WAN, datacenter switching, routing, firewalls, VPN, wireless, NAC, load balancing, PKI and certificates, DNS, DHCP, IPAM, and secure configuration management.
• Hands-on experience operating cybersecurity tooling such as secure web and DNS services, network detection and response, vulnerability management, SIEM and logging integrations, and security monitoring.
• Experience with network and security automation using Python, PowerShell, Ansible, Terraform, APIs, or comparable tools.
• Working knowledge of NIST CSF, CIS Controls, incident-response practices, and applicable regulatory or industry requirements, including NERC CIP where relevant to the IT environment.
• Strong analytical, troubleshooting, documentation, communication, collaboration, and customer-service skills.

Responsibilities

• Design, deploy, and support datacenter and campus switching, routing, VLANs, VRFs, high availability, capacity planning, and network segmentation.
• Administer next-generation firewalls, security zones, NAT, threat-prevention services, firewall policy lifecycle, and least-privilege access controls.
• Engineer WAN, internet-edge, remote-site, remote-access VPN, and site-to-site VPN connectivity, including integrations with identity, MFA, and device-trust services.
• Design and support corporate and guest wireless, controllers, access points, RF performance, 802.1X, network access control, device profiling, and secure authentication.
• Configure load balancers, virtual servers, pools, health monitors, persistence, TLS termination, and high-availability services.
• Manage the network-facing certificate lifecycle and PKI integrations.
• Engineer and operate secure web and DNS controls, network detection and response, security logging, SIEM integrations, and security-control health monitoring.
• Partner with the Security Operations Center on alert tuning, investigations, evidence gathering, and operational security use cases.
• Support secure DNS, DHCP, and IP address management and maintain telemetry, flow data, logging, alerting, packet analysis, and service dashboards.
• Maintain secure configuration baselines, backups, firmware and software lifecycle, and remediation of network-device and security-tool vulnerabilities.
• Automate repeatable work using APIs, scripting, and infrastructure-as-code practices.
• Develop and test network and security-platform recovery and failover capabilities.
• Prepare change and rollback plans and provide incident escalation, containment support, root-cause analysis, and vendor coordination.

Skills

Python scripting

PowerShell

Ansible

Terraform

APIs

NIST CSF & CIS Controls

Networking (LAN/WAN)

Education

Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity

Tools

SIEM integrations

Vulnerability management tooling

Job description

Georgia System Operations Corporation (GSOC) seeks a Network Security Engineer to design, deploy, and operate secure network services and cybersecurity tools across datacenter, campus, and edge environments. The role emphasizes VPNs, firewalls, DNS security, and automation to improve availability and visibility.

You will partner with SOC, infrastructure, and vendor teams, mentoring peers and driving change within established processes. This is an onsite role in Georgia with no visa sponsorship.