Network Security Engineer

Network Security Engineer This role is fully onsite Network Security Engineer Job summary The Network Security Engineer is responsible for designing, implementing, and maintaining secure and highly available network infrastructure. The ideal candidate has extensive hands-on experience with Cisco routing, switching, and security platforms, with an emphasis on Cisco Firepower. This role involves managing enterprise-wide network security, optimizing network performance, and responding to security incidents. Network Security Engineer Key responsibilities Design, deploy, and maintain network infrastructure using Cisco technologies, including routers, switches, and firewalls. Configure and manage Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) to enforce security policies, manage access control, and implement intrusion prevention systems (IPS). Implement, troubleshoot, and optimize dynamic routing protocols, including BGP (Border Gateway Protocol) for external connectivity and EIGRP (Enhanced Interior Gateway Routing Protocol) for internal networks. Support and manage Layer 2 switching technologies, such as VLANs, STP, and EtherChannels, to ensure efficient and secure network operations. Utilize extended detection and response (XDR) platforms to monitor network traffic, analyze security events, and investigate potential threats. Manage security protocols and controls, including VPNs (IPSec and SSL), to provide secure remote access and site-to-site connectivity. Collaborate with the security and IT teams on incident response, root cause analysis, and the development of mitigation strategies. Ensure compliance with security standards and policies by conducting regular audits, vulnerability assessments, and penetration testing. Develop and maintain comprehensive documentation, including network diagrams, security policies, and configuration standards. Provide advanced (Tier 3) support for network and security-related issues escalated by junior staff. Network Security Engineer Qualifications Bachelors degree in Computer Science, Information Technology, or a related field, or equivalent experience. CCNP certification in Enterprise or Security is required; CCIE is highly preferred. Extensive, hands-on experience with Cisco networking hardware, including Catalyst switches, Firepower firewalls, and Cisco routers. In-depth knowledge of network protocols and technologies, including BGP, EIGRP, OSPF, VLANs, and VPNs. Demonstrable experience managing Cisco Firepower appliances and FMC. Experience with XDR or other security monitoring and analysis platforms. Strong analytical and problem-solving skills, with the ability to troubleshoot complex network and security issues. Excellent communication skills, with the ability to collaborate effectively with cross-functional teams and technical personnel. Relevant certifications such as CISSP or other vendor-specific security certifications are a plus.