Network Security Engineer

About the role

Our client, a growing financial firm in Massachusetts, is looking for a Network Security Engineer to join the team. This role will design, implement, and maintain network security solutions to safeguard the firm’s information assets. The position is a five-days-a-week onsite role.

Responsibilities

• Provide technical expertise in troubleshooting and resolving complex network security issues, ensuring minimal downtime.
• Monitor network traffic for signs of security threats and respond promptly to incidents, conducting root cause analysis and implementing corrective actions.
• Plan and engineer solutions to address existing threats and security issues, particularly driving the remediation of security-related findings from IT audits and client examinations.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential system vulnerabilities.
• Maintain and manage Identity and Access controls, ensuring secure user and service account permissions, and regularly review access controls to maintain a secure environment.
• Implement and maintain network security groups, access controls, and intrusion detection/prevention systems, as well as monitor third-party security solutions.
• Stay abreast of emerging security threats, industry best practices, and the latest advancements in network security technologies and processes.

Requirements

• Proven experience as a system network engineer or information security engineer with a focus on network security in the financial industry.
• Strong knowledge of on-prem system administration, including Windows and Linux environments.
• Proficient in network protocols, routing, and switching technologies.
• Proficient in cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Experience with scripting languages such as PowerShell, Python, or Bash.
• Strong understanding of firewall configurations, intrusion detection/prevention systems, VPNs, and other network security technologies.
• Strong understanding of TCP/IP and IP addressing, LAN technology including Ethernet and Ethernet switching, and routing fundamentals.
• In-depth knowledge of Identity Access Management technologies such as OKTA and protocols like Auth0, SAML, and OpenID Connect.