Engineer - Network Security

Reports to: Director - Network Technologies · Location: In Office, Orange CT

Pay

The base salary range for this position is $96,400 – $120,500, dependent upon experience and location.

Benefits

• Competitive benefits and growth opportunities
• Generous performance-based bonuses
• 12% 401(k) match
• Comprehensive health, dental, and vision insurance
• Tuition reimbursement
• Professional development and clear career-advancement pathways

About the role

The Engineer – Network Security role performs as a technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. This role will support the engineering, installation, maintenance and administration of all technical aspects of corporate network security including software and hardware. The incumbent will be responsible for translating business requirements into secure network solutions or process designs.

Responsibilities

• Supports IT Network Security in projects by gathering business requirements and architects/designs new network solutions to meet business needs, global standards, and network & security design standards.
• Interacts with global counterparts to reach agreement on solutions.
• Manages relationship with outsourced vendors and coordinates the execution of the design plan. Ensures that all aspects of the architecture are executed to plan.
• Consistently reviews performance of existing infrastructure; plans and executes lifecycle upgrades as required to meet/exceed existing SLAs.
• Plans, coordinates, communicates, and executes upgrades; partners with cross-functional teams as required.
• Partners with outsourced vendors in support of the executed design plan.
• Analyzes current state and proposed network-related infrastructure and conducts risk assessments based on impact and potential severity of a security-related issue.
• Participates in cyber investigations; analyzes data/evidence to identify potential cyber incidents and vulnerabilities.
• Supports forensic research, as required, to assess impact to corporate information assets. Provides insights into recommendations for corrective actions.
• Monitors assigned aspects of Internet and intranet security and ensures ongoing effectiveness. Proactively assesses and makes recommendations for improvement.
• Assists in the deployment, configuration, and maintenance of SDWAN solutions with preference for Fortinet. Responsibilities include monitoring SDWAN performance, troubleshooting connectivity and security issues, and collaborating with senior engineers to optimize network architecture.
• Administers, configures, and optimizes enterprise firewalls, with a strong preference for experience in Fortinet (FortiGate), Palo Alto Networks, and Checkpoint platforms. Responsibilities include advanced policy management, high-availability setup, firmware upgrades, and integration with SIEM and automation tools.
• Implements and manages secure web gateway solutions, with a preference for Zscaler. Responsibilities include policy configuration, user authentication integration (e.g., SAML, AD), and troubleshooting web access and security incidents.
• Deploys, configures, and maintains Web Application Firewall (WAF), with a preference for Akamai. Responsibilities include rule tuning, monitoring for application-layer threats, and collaborating with application teams to minimize false positives and optimize protection.
• Assigns and coordinates external Internet domain names and identifiers used in network communication and assures their uniqueness.
• Supports the resolution of all network security infrastructure-related break/fix issues. Accurately interprets symptoms, identifies root cause, and takes appropriate corrective action to resolve.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or a related field of study with a minimum of two (2) years of hands-on experience in network engineering, including operational support and troubleshooting of enterprise firewalls, secure web gateways, and web application firewalls.
• An equivalent combination of education and experience may be considered.

Preferred Qualifications

• Certifications: Fortinet NSE, Palo Alto PCNSE, Checkpoint CCSA/CCSE, Zscaler Certified Professional, Akamai Security certifications.
• Experience assisting in the deployment, configuration, and maintenance of SDWAN solutions is highly desirable.
• Experience working with secure web gateways: Zscaler.
• Experience with web application firewalls: Akamai.
• Experience troubleshooting enterprise firewalls: Fortinet, Palo Alto Networks, and Checkpoint.