Senior Network Security Engineer

About the role

Artmac Soft is a technology consulting and service-oriented IT company that provides innovative technology solutions and services to customers. Job Type: W2/C2C. Location: San Francisco, California (On-Site).

Responsibilities

• Design, implement, and maintain secure enterprise network infrastructure.
• Configure and manage Palo Alto, Cisco ASA, FortiGate, and Check Point firewalls.
• Manage routing and switching technologies including BGP, OSPF, EIGRP, VLAN, VXLAN, VRF, and MPLS.
• Implement Zero Trust, ZTNA, SASE, network segmentation, and access-control solutions.
• Monitor and protect networks using IDS/IPS, SIEM, SOAR, and threat-detection tools.
• Design and support secure AWS, Azure, and GCP network connectivity.
• Automate network and security tasks using Python, Ansible, Terraform, and APIs.
• Implement secure VPN, MFA, 802.1X, RADIUS, TACACS+, and identity-based access controls.
• Support Kubernetes and cloud-native network security, including Calico, Cilium, Istio, and mTLS.
• Monitor network performance, troubleshoot connectivity issues, and perform root-cause analysis.
• Support incident response, threat hunting, security investigations, and remediation.
• Implement high-availability, disaster-recovery, and business-continuity solutions.
• Maintain security standards and compliance requirements including HIPAA, PCI-DSS, SOX, GLBA, and NIST.
• Collaborate with cloud, infrastructure, cybersecurity, DevOps, and application teams.
• Prepare technical documentation, network diagrams, security procedures, and operational runbooks.

Requirements

• 12+ years of experience in network engineering, network security engineering, or related infrastructure-security roles.
• Strong experience designing and supporting enterprise network-security architectures.
• Advanced knowledge of BGP, OSPF, EIGRP, MPLS, VLAN, VXLAN, VRF, EVPN-VXLAN, STP, HSRP, and VRRP.
• Strong hands-on experience with enterprise firewalls such as Palo Alto, Cisco ASA, FortiGate, and/or Check Point.
• Experience with IDS/IPS, SIEM, SOAR, threat detection, threat hunting, and incident response.
• Strong understanding of Zero Trust, ZTNA, SASE, network segmentation, micro-segmentation, IAM, and NAC.
• Hands-on cloud networking/security experience with AWS