Network Security Engineer / Architect (Staff Augmentation) in NYC

Amtex Systems Inc is an information technology and talent solutions company offering talent and BI consulting to the companies in US for over 25 years.

Our solutions are designed to fill resource gaps, by providing the right candidates who deliver value to the organization. Our propensity to nurture and build strong relationships with our clients helps us better understand their business demands and gives us the ability to provide services that are on time and rise above the rest.

Network Security Engineer / Architect (Staff Augmentation)

Key Responsibilities

• Implement and fine-tune the Network Detection and Response (NDR) solution to monitor east-west traffic.
• Build, test, and tune network detections using Zeek, Suricata, and Snort, mapped to MITRE ATT&CK.
• Maintain and support IPS/IDS tools and Palo Alto firewalls.
• Maintain and update policies in the SASE platform.
• Operate and maintain the packet broker and SSL/TLS decryption platform.
• Support the email security platform, including policy tuning and investigation of email-borne threats.
• Manage and tune OT network IDS.
• Perform PCAP analysis, threat hunting, and network-focused incident response.
• Create and maintain architecture diagrams, designs, runbooks, and SOPs.
• Lead projects from design through implementation, including status reporting to stakeholders.
• Visit data centers on an ad hoc basis as needed for installs, troubleshooting, and hardware work.
• Participate in on-call support, 1 week every 2 months.

Required Qualifications

• 7+ years of hands-on information security experience, with a strong network security focus.
• Hands-on experience with Zeek, Suricata, and Snort, including writing and tuning rules and detections.
• Strong PCAP analysis skills (Wireshark, tshark).
• Threat hunting and incident response experience.
• Strong networking background: routing and switching (BGP, OSPF, VLANs, VXLAN), load balancers, and network segmentation.
• Data center networking experience, including switches, SFPs and optics, and aggregation network design.
• Experience with IDS/IPS, packet brokers, and enterprise firewalls.
• Working knowledge of email security concepts and tooling.
• Ability to produce clear architecture diagrams and technical documentation (Visio, Lucidchart, or similar).
• Excellent verbal and written communication skills.

Preferred Experience
Experience with comparable products is welcome. The following vendors are preferred:

• NDR: Corelight, ExtraHop
• Firewalls: Palo Alto Networks
• Email security: Proofpoint
• SASE / SSE / cloud security: Netskope, Prisma Cloud, ZTNA solutions
• SIEM: Splunk or similar, including detection integration
• OT security: OT network IDS, VPN, and industrial protocols such as DNP3 and Modbus
• OT standards awareness: IEC 62443, NERC CIP

Additional Skills (Strong Plus)

• Detection engineering with Sigma and YARA rules
• TLS/SSL inspection design and certificate management
• Microsegmentation and zero trust architecture design
• Flow data analysis (NetFlow, IPFIX)
• Scripting and automation (Python, Bash) and API-driven tooling
• Change management, including writing and following change procedures

Preferred Certifications

• GIAC: GCIA, GCFA, GNFA (GICSP is a plus for OT)
• CISSP
• PCNSE
• CCNP Security

Personal Attributes

• Positive attitude and a strong willingness to learn.
• Able to lead a project and guide other engineers without formal authority.
• Collaborative team player who communicates clearly with both technical and non-technical audiences.
• Comfortable working independently in a large, fast-moving engineering team.

Work Arrangement

• Hybrid: 3 days per week on site in Manhattan.
• On-call: 1 week every 2 months.
• Occasional ad hoc data center visits.