Senior Network Security Engineer

Administer enterprise routing and switching utilizing BGP, OSPF, HSRP/VRRP, VLANs, QoS, Cisco Catalyst/Nexus, Juniper, Aruba, and Meraki technologies. Our client is seeking a Senior Network Security Engineer to design, implement, and support secure enterprise network infrastructures across a diverse portfolio of clients.

Our client is seeking a Senior Network Security Engineer to design, implement, and support secure enterprise network infrastructures across a diverse portfolio of clients. This role focuses on enterprise networking, cybersecurity, firewall administration, SD-WAN, and compliance within highly regulated environments.

This is a 100% remote position with up to 25% travel for client implementations and major infrastructure projects.
Key Responsibilities

• Design, implement, and support enterprise network infrastructure across multi-site and hybrid cloud environments.
• Configure and manage enterprise firewall platforms including Palo Alto, Fortinet, Cisco ASA/Firepower, Juniper SRX, and Sophos.
• Administer enterprise routing and switching utilizing BGP, OSPF, HSRP/VRRP, VLANs, QoS, Cisco Catalyst/Nexus, Juniper, Aruba, and Meraki technologies.
• Design and support SD-WAN, VPN, and secure remote access solutions.
• Implement network segmentation, Zero Trust architecture, and security hardening initiatives.
• Support compliance efforts for CMMC Level 2, NIST 800-171, and SOC 2 environments.
• Configure and maintain IDS/IPS, NAC, SIEM integrations, and security monitoring tools.
• Respond to network security incidents and assist with remediation efforts.
• Develop network diagrams, technical documentation, and audit-ready change records.
• Partner with engineering teams and clients to successfully deliver infrastructure and security projects.

Required Qualifications

• 6+ years of enterprise network and security engineering experience.
• Strong experience with enterprise firewall platforms, preferably Palo Alto, Fortinet, and Cisco.
• Expertise in enterprise routing, switching, SD-WAN, and VPN technologies.
• Experience implementing network segmentation and Zero Trust security models.
• Working knowledge of CMMC Level 2, NIST 800-171, and SOC 2 compliance requirements.
• Experience with IDS/IPS, Cisco ISE, Aruba ClearPass, or SIEM platforms.
• Strong troubleshooting, documentation, and communication skills.
• Ability to travel up to 25%.

Preferred Certifications

• PCNSE
• Fortinet NSE 4+ (or equivalent)
• CCNP Enterprise or Security
• JNCIS
• CISSP (preferred)