Network Security Policy Analyst II
Apex Systems · Spring, TX · 2 wk ago
OTHR$70–$75/hrContract
Contract position – estimated 1 year, onsite in Spring, TX. Pay: $70-75/hr (W2).
About the role
We are seeking a Network Security Policy Engineer to join a Network Security Policy team responsible for governing and securing enterprise network connectivity across on-premises and cloud environments. This role focuses on firewall policy management, network security governance, risk assessment, and connectivity reviews, partnering with Infrastructure, Cloud, OT, and Cybersecurity teams to ensure secure and compliant network operations.
Responsibilities
- Review, analyze, and approve firewall rules, port opening requests, and network connectivity requests.
- Govern internal and external network connections, ensuring risks are identified and security controls are appropriately applied.
- Provide network security consultation for enterprise, cloud, and hybrid networking environments.
- Evaluate requests for exceptions to established security standards and recommend risk-based solutions.
- Partner with Cloud, Infrastructure, Cybersecurity, and Operational Technology (OT) teams to ensure security requirements are implemented consistently.
- Assess network traffic flows, security architectures, and connectivity requirements across enterprise environments.
- Support and improve governance processes related to firewall policy management and network security controls.
- Develop or support automation solutions using Python, Ansible, APIs, or related technologies to improve operational efficiency.
- Contribute to ongoing process improvement initiatives and identify opportunities for automation across the team.
Requirements
- 3+ years of experience in Network Security, Network Engineering, or Cybersecurity.
- Strong hands-on experience with firewall policy management, firewall rule reviews, and network security governance.
- Experience working with enterprise firewall platforms such as Fortinet, Cisco ASA, Cisco FMC, Palo Alto, or Juniper.
- Strong understanding of TCP/IP networking, network traffic flows, VPNs and IPSec, NAT, DNS, IDS/IPS technologies, network authentication and encryption, and Layer 3 / Layer 4 security concepts.
- Experience conducting risk assessments and reviewing network security requests.
- Strong troubleshooting, analytical, and communication skills.
- Ability to work independently while collaborating across global teams.
Preferred Qualifications
- Experience with cloud networking and security concepts within AWS and Azure, including security groups, cloud firewalls, routing, and connectivity between enterprise and cloud environments.
- Exposure to automation tools and scripting such as Python, Ansible, GitHub, OpenShift, or REST APIs.
- Experience with tools such as AlgoSec or Splunk.
- Security certifications (CCNA Security, CCNP Security, Fortinet, CISSP, GIAC) are welcome but not required.
What the hiring manager is looking for
- Strong firewall policy and network security governance experience as the top priority.
- Someone comfortable reviewing and approving network security requests rather than performing day-to-day firewall administration.
- A candidate who understands network security concepts deeply enough to consult on architecture and connectivity decisions.
- Automation experience is a plus, but this is not a software development role.
- Cloud knowledge is desirable, particularly understanding how enterprise networks securely connect to AWS and Azure environments.
- A long-term team member who can contribute ideas, improve processes, and help drive operational efficiency.
Benefits
- Supplemental benefits including medical, dental, vision, life, and disability insurance plans.
- Employee Stock Purchase Program (ESPP) and 401K with company match after 12 months of tenure.
- Health Savings Account (HSA) on the HDHP plan.
- SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
- Corporate discount savings program and other discounts.
- On-demand training program, access to certification prep, and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
- Certification discounts and perks for associations including CompTIA and IIBA.
- Dedicated customer service team for consultants and access to a certified Career Coach.