Senior Network Security Engineer

Senior Network Security Engineer Contract to hire Remote
Project Scope:

• Add a Senior Firewall / Network Security Engineer on a contract-to-hire basis to address a longer-term hiring need and alleviate significant workload on the existing team.
• Team is coming out of a major security breach and is balancing daily remediation efforts with a growing pipeline of security projects.
• Heavy focus on on-prem firewall/security engineering, while the broader organization continues migrating from on-prem into cloud.
• Major initiatives include macro/micro segmentation, data center restructuring, annex/small-office security solutions, firewall remediation, and security architecture/design.
• Project engineering is the priority, with ongoing BAU/support responsibilities secondary.

Team Size & Breakdown:

• Small network/security team currently struggling to keep up with project and remediation demand.
• Resource needs to be highly independent because there is very little capacity for hand-holding.
• Looking for someone who can drive solutions and provide technical leadership, rather than simply take orders or execute tickets.

Development Methodology:

• Current environment is largely manual, particularly around security/network infrastructure.
• Engineer will need to assess existing environments, understand dependencies/traffic flows, design solutions, implement changes, and document the environment.
• Documentation is important because there are significant legacy complexities
• Automation and Infrastructure as Code would be valuable modernization opportunities, but they are not current-state requirements.

High-Level Individual Duties:

• Hands-on engineering and policy management across Check Point and Cisco FTD / Firepower.
• Design, configure, troubleshoot, and improve firewall policies, rules, traffic flows, and network segmentation.
• Lead macro and micro segmentation initiatives and contribute to security remediation following the breach.
• Provide design/architecture support for data center restructuring, annex locations, small-office environments, and other security projects.
• Reverse-engineer complicated/legacy network environments and independently determine how solutions should be designed and implemented.
• Create and improve technical documentation.
• Secondary responsibility supporting ongoing BAU firewall/network security operations.

Must-Haves (Concepts & Tools):

• Both Check Point AND Cisco FTD / Firepower are required.
• Strong hands-on firewall engineering and firewall policy experience.
• Macro and micro network segmentation.
• Strong network/security fundamentals, including understanding traffic flows, firewall rules/policies, connectivity, and troubleshooting.
• Senior-level engineer capable of designing their own solutions and then implementing them.
• Ability to independently understand a complicated, legacy, and potentially poorly documented network.
• Must be a driver/leader rather than an order-taker.
• Hands-on engineering mentality with enough architecture experience to own technical designs.

Nice-to-Haves:

• Gigamon
• CrowdStrike / endpoint security
• Cloud networking/security experience, although cloud is not required
• Experience supporting an on-prem-to-cloud migration
• Automation / Infrastructure as Code
• Terraform, Ansible, Python, or similar automation experience
• Experience modernizing highly manual security/network environments
• Broader security architecture experience