Senior Network Security Engineer

This is a hands-on, operational role with complete ownership of the design, implementation, and security of our core network infrastructure. You will be responsible for ensuring the reliability, performance, and security of all data in transit by managing enterprise-grade routing, switching, and firewall technologies.

Responsibilities

• Network & Security Architecture: Design, implement, and maintain the complete network and security infrastructure, including core/access switches, routers, firewalls, and wireless controllers.
• Device Management: Take full lifecycle ownership of all network and security appliances, including Cisco switches (Catalyst/Nexus), FortiGate firewalls, IDS/IPS systems, Cisco ISE (NAC), and VPN concentrators.
• Protocol Management: Implement, configure, and troubleshoot advanced routing and switching protocols, including OSPF, BGP, STP, VLAN, VXLAN, and EVPN.
• Security Policy Enforcement: Develop, implement, and meticulously maintain firewall rules, security policies, site-to-site/remote access VPNs, and network access control policies.
• Physical Operations: Perform all physical cabling and racking for new network and security hardware within the data center.
• Monitoring & Performance: Configure and manage monitoring for all network devices, security appliances, and circuit links to ensure health, performance, and availability, proactively addressing bottlenecks.
• Incident Ownership: Act as the primary owner and first responder for all incidents related to network connectivity and security, participating in a dedicated on-call rotation.
• Documentation: Create and maintain the definitive source of truth for all network diagrams, IP address schemas, firewall policies, and device configurations.
• Vendor Management: Own the technical relationship and manage all support cases with network and security vendors (e.g., Cisco, Fortinet).

Requirements

• Minimum 3 years of relevant experience in network engineering with a strong focus on security.
• Deep understanding of routing and switching protocols (OSPF, BGP, STP, VLAN).
• Proficiency in working with FortiGate firewalls, with a practical understanding of NSE4/NSE7-level concepts.
• Hands-on experience with Cisco Catalyst and Nexus switches.
• Strong problem-solving abilities and meticulous attention to detail.
• Excellent documentation skills and adherence to change management practices.
• Strong collaboration and communication skills.