Mid-Level Network Security Engineer

Position Overview:
We are seeking a highly skilled and motivated Network & Security Engineer to design, implement, and maintain the company's network and security infrastructure. The ideal candidate will possess a deep understanding of network protocols, security policies, and firewall management combined with the ability to troubleshoot complex network and security issues.
You will collaborate with cross-functional teams to ensure the security, efficiency, and performance of all IT systems enabling secure communication, data transfer, and protection from cyber threats.
Network Infrastructure Design & Implementation:

Design, deploy, and maintain local and wide area network (LAN/WAN) solutions.
Configure and troubleshoot network devices including routers, switches, firewalls, and wireless access points.
Manage and monitor network performance ensuring optimal uptime and minimal disruptions.
Implement and manage VPNs, SD-WAN, and other remote access technologies.

Network Security Management:

Develop and enforce security policies and best practices for network infrastructure.
Configure, monitor, and manage firewalls (e.g. Palo Alto, Cisco, Fortinet, Checkpoint).
Implement Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).
Perform regular vulnerability assessments and penetration testing.
Ensure compliance with internal and external security standards (e.g. ISO 27001, NIST, GDPR).

Incident Response & Troubleshooting:

Act as the first point of contact for network and security-related incidents.
Investigate, analyze, and resolve network and security issues in a timely manner.
Respond to security alerts and take appropriate action such as mitigation or escalation.
Perform root cause analysis and implement corrective actions to prevent recurrence.

Security Monitoring & Reporting:

Continuously monitor network traffic for suspicious activities and potential security breaches.
Maintain network security logs and generate reports for management.
Assist with security audits and risk assessments identifying potential vulnerabilities.

Collaboration & Documentation:

Collaborate with IT teams, vendors, and other departments to implement network and security solutions.
Provide technical expertise and support to other teams for troubleshooting and resolving network issues.
Document network configurations, security measures, incident resolutions, and best practices.

Requirements
Required Qualifications:
Education: Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience).
Certifications:

Cisco Certified Network Associate (CCNA), JNCIA, or equivalent certifications.
Additional certifications (e.g., Palo Alto, Checkpoint, Fortinet, AWS Certified Security Specialty) are a plus.

Required Experience:

Minimum 3-5 years of experience in network engineering or security roles.
Proven experience with network devices (routers, switches, firewalls) and security technologies (IDS/IPS, VPN, NDR, WAF, Load Balancers).
Experience with cloud networks and hybrid environments (AWS, Azure, Google Cloud) is a plus.

Required Skills:

Strong knowledge of TCP/IP, BGP, OSPF, DNS, DHCP, VLANs, and network troubleshooting.
Proficiency in firewall and VPN technologies (Palo Alto, Fortinet, Cisco FTD).
Experience with network switches & routers (Cisco, Juniper, Huawei).
Experience with SDN (Cisco ACI).
Experience with network monitoring tools (e.g., SolarWinds, Nagios, Wireshark).
Experience with Load Balancers/WAF (F5, Array).
Experience with NAC (Cisco ISE, Forescout).
Familiarity with network security best practices, encryption technologies, and secure network design.
Excellent troubleshooting and problem-solving skills.
Strong written and verbal communication skills.

Preferred Qualifications:

Experience with automation tools (e.g., Ansible, Terraform, Python scripting).
Experience with DNS Security (F5, Infoblox).
Familiarity with security Email Security tools (e.g., Fortimail, Proofpoint).
Knowledge of regulatory compliance standards and frameworks (e.g., GDPR, HIPAA, PCI DSS).
•