Lead Network Security Engineer

Title: Lead Network Security Engineer
Location: Brooklyn Park, MN | Hybrid
Job Type: Contract (6 months)
Compensation: $63.00 - $93.00 per hour (W2)
Industry: Retail

Key Skills: 
Expert in large?scale network security engineering with deep experience in NSM/visibility platforms (Zeek, Suricata, Security Onion), Linux administration, packet analysis, configuration management automation (Ansible/Terraform), high?throughput telemetry pipelines, scripting (Python/Bash), and core networking protocols (TCP/IP, routing, VLANs, DNS, DHCP, firewalls).

About the Role
We are partnering with a major Fortune 50 retail organization recognized nationwide for its scale, innovation, and highly advanced technology ecosystem. Behind its well-known consumer brand is a sophisticated cybersecurity program centered in a cutting-edge Cyber Fusion Center. This team drives continuous innovation in enterprise security, developing and deploying solutions that protect a complex global network.

In this role, you will lead network security monitoring engineering efforts, collaborating with software and security engineering teams to enhance visibility across enterprise networks. You will work closely with cybersecurity stakeholders and network engineering partners to ensure visibility requirements are met and continually improved so that network-based threats can be detected quickly and accurately.

• Evaluate the current configuration management and orchestration environment, identifying gaps, risks, and improvement opportunities. Design a modern, scalable solution and lead its end-to-end implementation from architecture through rollout.
• Define target state architecture and engineering standards, including patterns, guardrails, CI/CD, and configuration governance for the network security monitoring platform.
• Lead design reviews and architectural decision records to ensure solutions meet critical security, reliability, and operability standards.
• Collaborate with engineering and cybersecurity teams to drive enterprise visibility, support telemetry initiatives, and enhance detection capabilities.

• Eight or more years of experience in network engineering, network visibility architecture, or network security engineering
• Experience designing and operating large-scale telemetry or visibility platforms including high throughput packet capture, sensor fleets, and log pipelines
• Strong experience administering Linux environments, including RHEL, CentOS, or Ubuntu
• Proven experience designing and operating enterprise configuration management and orchestration tools such as Ansible, Salt, Puppet, Chef, or Terraform
• Expertise in analyzing and optimizing systems capacity, performance, and operational health
• Ability to diagnose issues across system, application, and network layers
• Experience working in production environments with change control and operational discipline
• Solid understanding of TCP/IP, routing protocols, VLANs, NAT, DNS, DHCP, and firewall concepts
• Scripting experience with Python, Bash, or similar languages for automation and tooling
• Ability to communicate engineering solutions through detailed diagrams and technical documentation

• Experience optimizing tools such as Security Onion, Zeek, Suricata, or Snort
• Experience developing monitoring or testing frameworks
• Proficiency analyzing data in Kibana, Splunk, or Graylog
• Experience with Linux, Docker, and Git
• Practical experience with network packet analysis tools, including Wireshark or tcpdump

Equal Opportunity Statement
As an equal opportunity employer, Dahl Consulting welcomes candidates of all backgrounds and experiences to apply. If this position sounds like the right opportunity for you, we encourage you to take the next step and connect with us. We look forward to meeting you!

#IT.Indeed
#ZR