Network Security Engineer - NSE 26-02056

Job Title: Network Security Engineer

Work Type: NYC, NY - Hybrid

Position Overview

A large enterprise organization is seeking a detail-oriented Network Security Engineer to lead the hardening and modernization of its global network infrastructure. This role is focused on systematically auditing and remediating legacy configurations, enforcing strong network segmentation, and driving the transition toward a Zero-Trust architecture.

The ideal candidate will take ownership of firewall governance, reduce accumulated technical debt, and ensure the enterprise network remains compliant with institutional security standards and regulatory requirements.

Key Responsibilities

1. Firewall and Access Control Governance

• Audit & Rationalization

  • Conduct comprehensive audits of firewall rule sets and Access Control Lists (ACLs) across the enterprise network

  • Identify and eliminate redundant, outdated, or overly permissive rules

• Policy Management

  • Assist in developing and enforcing standardized procedures for firewall and ACL changes

  • Ensure all modifications comply with established security policies and governance frameworks

2. Network Segmentation & Isolation

• Architectural Review

  • Evaluate and enhance network segmentation strategies, including micro-segmentation, to reduce attack surfaces and prevent lateral movement

• Trust Zone Enforcement

  • Design and implement VLANs, routing, and access policies to maintain strict logical separation between trust zones such as:

    • Student

    • Faculty

    • Research

    • IoT

    • Administrative networks

3. Legacy Infrastructure Decommissioning

• Cleanup Operations

  • Identify and execute the decommissioning of unused network segments, obsolete VLANs, and outdated hardware configurations

• Infrastructure Migration

  • Lead remediation and consolidation of specialized or non-standard networks

  • Drive the phase-out and migration of legacy network environments to modern, standardized platforms

4. Documentation & Compliance

• Topology & Documentation Management

  • Maintain accurate, up-to-date network topology diagrams and security documentation reflecting all changes and segmentation designs

• Regulatory Alignment

  • Ensure all network hardening, cleanup, and modernization efforts comply with internal information security mandates and applicable regulatory standards

Required Skills & Experience

• Strong experience in enterprise network security engineering

• Hands-on expertise with firewall technologies and ACL management

• Proven experience designing and implementing network segmentation and Zero-Trust principles

• Experience auditing and remediating legacy network environments

• Strong documentation skills, including network diagrams and architecture artifacts

• Ability to work collaboratively across security, infrastructure, and operations teams

Preferred Qualifications

• Experience with micro-segmentation strategies

• Familiarity with regulatory and compliance-driven network environments

• Experience supporting large, global, or multi-campus network infrastructures