Network Security Engineer Firewall Rule Optimization - hybrid

Network Security Engineer Firewall Rule Optimization

Location: Jersey City, NJ / New York, NY (Hybrid 3 days/week onsite)

Position Overview
Years of incremental change can leave an enterprise network with broad firewall rules and routing paths that bypass proxy controls. This role is focused on finding those exposures, tightening them, and doing so safely. You will use rule-analysis tooling to identify overly permissive rules, work with application and infrastructure owners to validate required access, and implement changes under formal change control. The US-based engineer will cover the Eastern time zone portion of the follow-the-sun cycle and partner closely with counterparts in the UK and India.

Key Responsibilities
Review and tighten overly permissive firewall rules using AlgoSec analysis, including rule usage, risk, and shadowed or redundant rule findings
Right-size rules by narrowing sources, destinations, services, and ports based on observed traffic and validated application requirements
Identify routing configurations that allow traffic to bypass proxy controls, and drive remediation with the network and infrastructure teams
Analyze traffic flows across Layer 4 through Layer 7 to confirm the business need for access before rules are modified or removed
Partner with application and infrastructure owners to review proposed changes, confirm impact, and validate results after implementation
Prepare and execute changes under formal change-control processes, including implementation plans, testing, and rollback procedures
Document rule changes, rationale, and validation results so work can be handed off cleanly between India, UK, and US team members each day
Participate in regular follow-the-sun handoffs and status updates, tracking progress and open items across regions
Align rule and routing remediation with the target-state security design, flagging conflicts or gaps to the architecture and security teams
Support audit and risk review requests by providing evidence of changes, approvals, and outcomes

Required Qualifications
Hands-on firewall engineering and rule-base optimization experience in an enterprise environment
Strong routing knowledge and solid understanding of Layer 4 through Layer 7 traffic behavior
Ability to analyze traffic flows and determine the least-privilege access an application actually needs
Experience working within formal change-control processes in a regulated enterprise
Clear written communication and the discipline to document work for handoff across time zones

Preferred Qualifications
Experience with AlgoSec or similar firewall rule-analysis and policy-management tools
Proxy experience, such as Blue Coat/Symantec or Skyhigh
Financial services background