No third parties, no third parties, no third parties, no third parties, no thrid parties, no third parties.
We can onl work directly with applicants and no third parties are alllowed.
Job Title - Sr. Network Engineer
Location - Remote
Duration - 12+ Months
Job Summary: We are seeking a detail-oriented Network Security Engineer to lead the hardening and modernization of our enterprise network infrastructure. This role focuses on cleaning the house—systematically auditing legacy configurations, enforcing strict network segmentation, and transitioning our environment toward a Zero-Trust architecture. You will be responsible for the lifecycle of firewall governance, the decommissioning of technical debt, and ensuring that our global network company's remains compliant with institutional security mandates.
Senior Network Engineer NYUJP00001708
Key Responsibilities:
1. Firewall and ACL Governance
- Audit & Rationalization: Systematically review and audit existing firewall rule sets and Access Control Lists (ACLs) across the global enterprise to eliminate redundant, outdated, or overly permissive entries.
- Policy Management: Assist in developing and enforcing standardized management procedures for all firewall and ACL modifications, ensuring every change aligns with established security policies and compliance frameworks.
2. Network Segmentation & Isolation
- Architectural Review: Evaluate and enhance network segmentation strategies—including micro-segmentation—to minimize the attack surface and prevent lateral movement by malicious actors.
- Trust Zone Enforcement: Design and implement new VLANs and routing policies to ensure rigorous logical separation between diverse trust zones, including Student, Faculty, Research, IoT, and Administrative networks.
3. Legacy Infrastructure Decommissioning
- Cleanup Operations: Identify and execute the orderly decommissioning of legacy network segments, unused VLANs, and obsolete hardware configurations.
- Infrastructure Migration: Lead the remediation and consolidation of specialized networks, specifically focusing on the phase-out and migration of the OpNet infrastructure to modern, standardized platforms.
4. Documentation & Compliance
- Topology Management: Maintain accurate, high-fidelity network topology diagrams and documentation for all security-related changes and segmentation schemes.
- Regulatory Alignment: Validate that all network cleanup and security activities adhere strictly to internal GOIS (Global Office of Information Security) mandates and external regulatory standards
NOTES from Conference call..
- University notes with Samantha, Jeffrey (Associate director of network engineering) reporting to Syed as director
- Large complex environment of 13 Global sites. Mainly a Cisco and Palo Alto, Panorama, FMC, Infoblox, Nagios environment.
- Seeking 2 consultants for 1 year to work 100% remote. Only 1 remote interview with the entire networking team is needed. Just contractors as there is no plan to hire full-time.
- They are not seeking management consultants like EY or Deloitte Touch that just advise and tell them what to do. The two candidates have to be very hands-on and must have programming ability to do test and resolve issues on their own. Prefer Python, Linux shell, Ansible, Robot framework are pluses.
- Looking for candidates with experience on large scale, enterprise systems moving data from East to West and knowledge of segmenting of network to improve traffic performance and security issues. Someone who can improve their current firewall network and policies and security. Higher education or University environment is not necessary.
- They use Palo Alto Networks and prefer candidates knowledgeable of that product for network security (Next generation firewalls, blocking ransomware, malware, threat prevention, unauthorized access). Cloud security with AWS, Azure, Google Cloud Platform. Endpoint Security to protect cell phones, laptops, servers from threats.
- Exposure to Zero Trust architecture. Will be reviewing and improving upon existing firewall rule sets and Access Control Lists (ACLs) across the global enterprise.
- May need to work on weekends from time to time (very infrequently) and will be compensated.
