Zero-Trust Network Security Engineer

BrothersTech; United States; On-site; USD 90,000 - 140,000; Full time

Job summary

BrothersTech seeks a skilled Network Security Engineer to design, implement, and manage enterprise network security infrastructure across cloud and on-prem environments.

The role covers configuring NGFWs, VPNs, IDS/IPS, and security monitoring, with a focus on network segmentation and Zero Trust principles. Collaboration with SIEM teams and regular vulnerability assessments are required.

Qualifications

• 5+ years of hands-on network security experience.
• Experience designing and implementing NGFWs and VPNs.
• Strong knowledge of IDS/IPS, monitoring, and security policy management.
• Experience securing cloud networks (AWS/Azure/GCP) and on-prem environments.

Responsibilities

• Design, configure, and maintain enterprise network security infrastructure.
• Manage NGFWs including Palo Alto, Fortinet, and Cisco.
• Configure and troubleshoot site-to-site and remote-access VPNs.
• Implement IDS/IPS technologies to detect and prevent threats.
• Monitor network traffic, events, and suspicious activity.
• Perform firewall rule reviews and access control management.
• Implement network segmentation and Zero Trust security.
• Troubleshoot network connectivity and security incidents.
• Work with SIEM teams to investigate alerts.
• Conduct vulnerability assessments and audits.
• Secure cloud networks across AWS, Azure, or GCP.
• Maintain network security documentation and diagrams.

Skills

Network security

Threat detection

Cloud security

Security monitoring

Tools

Palo Alto firewall

Fortinet FortiGate

Cisco firewall

SIEM

Job description

BrothersTech seeks a skilled Network Security Engineer to design, implement, and manage enterprise network security infrastructure across cloud and on-prem environments.

The role covers configuring NGFWs, VPNs, IDS/IPS, and security monitoring, with a focus on network segmentation and Zero Trust principles. Collaboration with SIEM teams and regular vulnerability assessments are required.