Network Security Engineer II

job summary:

Enterprise Healthcare client has an immediate opening for a highly motivated Network Security Engineer II to join their dynamic and growing team. All qualified candidates are encouraged to apply!

location: Telecommute

job type: Contract

salary: $38.87 - 48.87 per hour

work hours: 8am to 5pm

education: Bachelors



responsibilities:

- What is the purpose of this team?

- Describe the surrounding team (team culture, work environment, etc.) & key projects.

- Do you have any additional upcoming hiring needs or is this request part of a larger hiring initiative? The purpose of the Firewall Platform Engineer position is to ensure the security, reliability, and compliance of the company's network by operating, enhancing, and governing enterprise firewall platforms. This role protects the organization's infrastructure from threats by administering firewall technologies, analyzing and optimizing security controls, and automating operational workflows. The engineer helps establish and enforce network security standards, supports incident response, and enables secure business connectivity across data center, cloud, and partner environments.

Typical Day in the Role

- Walk me through the day-to-day responsibilities and a description of the project (Outside of the Workday JD).

- What are the performance expectations/metrics?

- What makes this role unique? A typical day as a Firewall Platform Engineer blends hands on technical work, operational support, and collaboration across security and network teams.

Firewall & Network Security Operations

Administer and maintain next?generation firewalls (e.g., Palo Alto, Cisco ASA, Checkpoint, SonicWall).

Monitor, troubleshoot, and optimize firewall policies, NAT rules, routing, and security controls.

Conduct firewall compliance reviews, rule audits, and cleanup using tools such as Algosec, Panorama, or built?in vendor tools.

Analyze network traffic, netflow, and IDS/IPS events to identify anomalies and potential threats.

Security Engineering & Automation

Develop scripts or automation workflows to streamline firewall operations, policy deployment, and validation.

Assist in the design and implementation of new firewall platform capabilities, including segmentation, cloud connectivity, and zero-trust initiatives.

Support vulnerability remediation, configuration hardening, and alignment with corporate security standards.

Security Governance & Compliance

Ensure firewall and network security controls align with internal policies and industry frameworks (HIPAA, HITRUST, NIST CSF, etc.).

Collaborate with audit, compliance, and risk stakeholders to provide evidence, documentation, and remediation steps.

Maintain accurate configuration documentation, change records, and operational runbooks.

Cross?Team Collaboration

Partner with network engineering, SOC, endpoint security, and cloud teams to maintain holistic defense of the enterprise environment.

Participate in incident response efforts by analyzing network activity and implementing containment changes.

Provide subject-matter support for projects requiring secure connectivity across data centers, cloud environments, and partner networks.

Morning: Monitoring, Reviews, and Daily Hygiene

- Start by reviewing alerts, changes, and overnight activity on the firewall platforms.

- Check for anomalies in traffic flows, policy hits, or automated compliance reports.

- Respond to requests from the SOC or security operations regarding suspicious traffic or containment rules.

Mid Morning: Operational Work & Ticket Queue

- Work through firewall change requests: new rules, rule modifications, connectivity troubleshooting, or policy cleanups.

- Investigate and resolve tickets related to access failures, segmentation issues, or platform performance.

- Use tools like Wireshark, Panorama, Algosec, or vendor consoles to validate behavior or optimize rules.

Midday: Collaboration & Project Work

- Meet with network engineering, cloud teams, or application owners to plan secure network designs for upcoming projects.

- Participate in cross team architecture reviews or security governance discussions.

- Provide firewall guidance for data center migrations, cloud onboarding, or new business partnerships.

Afternoon: Engineering and Continuous Improvement

- Work on automation scripts or workflows to streamline firewall operations (policy reviews, rule pushes, reporting).

- Update documentation, runbooks, and topology diagrams.

- Conduct firewall audits or cleanups to improve performance, reduce risk, and align with standards like HIPAA/HITRUST.

- Develop and test new configurations, features, or platform enhancements in lab or test environments.

Throughout the Day: Incident & Support Responsiveness

- Assist the SOC or Threat Response team during active investigations, performing traffic analysis or implementing blocks.

- Provide expert troubleshooting for network issues where firewalls are part of the path.

- Collaborate with compliance or audit teams to supply evidence and ensure configuration accuracy.

End of Day: Planning and Wrap Up

- Review change windows, upcoming maintenance, and platform health metrics.

- Prepare for scheduled deployments or rule pushes.

- Identify areas for improvement and propose solutions for better security controls or operational efficiency.

qualifications:

Bachelors

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.


It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.