Systems Security Engineer

No Corp-to-corp / No Third-Party Agencies
.
We're Hiring on behalf of our client for Systems Security Engineer
100% Onsite in Huntington Beach, CA
$100,000 to $120,000 (DOE)
: Full-Time, Direct Hire

.
Partnered with a client who is seeking a Systems Security Engineer with deep hands on technical skills in securing and supporting enterprise IT infrastructure. This position focuses on strengthening network and system defenses, maintaining a secure technical environment, and responding quickly to cybersecurity threats.
.

In this role, you will help protect and expand global infrastructure by monitoring systems, applying security updates, supporting technical projects, and maintaining compliance with major cybersecurity frameworks. This position requires broad hands-on technical expertise spanning cybersecurity operations, networking, virtualization, and server administration.
.

Primary Responsibilities

• Monitor network and system activity, investigate unusual behavior, and carry out incident response activities.


• Conduct ongoing vulnerability assessments, patching, and remediation across servers and network devices.


• Apply and support compliance with standards such as NIS, ISO 27001/27002, CIS, HIPAA, CCPA/CPRA, and GDPR.


• Identify and report insecure ports/protocols, unauthorized devices, and other risks on the network.


• Configure and maintain firewall environments, including route policies and security based configurations.


• Install and configure network hardware (switches, firewalls, and related equipment).


• Perform Layer 2 switch administration on Cisco/Ruckus equipment, including configuring LAGs, interfaces, trunks, and creating and managing segmented VLANs.


• Support Windows Server roles and services, including installation, configuration, and troubleshooting.


• Generate and maintain certificates for devices and systems with web administration interfaces.


• Work with Active Directory environments-designing, implementing, configuring, and resolving directory related issues.


• Create, deploy, and maintain GPOs for application rollout and security enforcement, including Windows Firewall settings.


• Use PowerShell to streamline repetitive administrative tasks.


• Build Linux VMs, run basic commands, and support Linux based appliances.


• Maintain VMware virtual environments, including creating VMs and applying ESXi and vCenter patches.


• Administer virtual switching components (standard & distributed port groups).


• Support Synology Active Backup and other advanced Synology features.


• Manage backup solutions and perform recovery tasks as needed.


• Administer user accounts in Microsoft 365.


• Document configurations, processes, and procedures for servers and network systems.


• Proactively monitor infrastructure using available tools to identify emerging issues.


• Participate in patching cycles across the entire environment.


• Stay current with new technologies and evolving security threats.


• Maintain clear communication with internal teams, users, and external vendors.


• Contribute to IT infrastructure projects and deliver assigned tasks with full documentation.


• Follow safety policies, demonstrate punctual and reliable attendance, and uphold Cambro's values of Safety, Quality, Respect, and Service.

Required Qualifications

• Bachelor's degree or related experience.


• 5-10 years of experience in IT security, network, administration, and support roles.

• Experience with Fortinet solutions, EDR, email security solutions


• Solid knowledge of cybersecurity frameworks including NIS, ISO27001/27002, CIS, HIPAA, CCPA/CPRA and GDPR.


• Solid working knowledge of Layer 2 (VLANs, Inter-VLANs, VTP Domains, bridge groups, MVRP, ACL's) technologies and network segmentation.


• Strong knowledge of DNS records including reverse zones and maintaining DNS records


• Strong DHCP Knowledge to include DHCP Fail over and able to configure DCHP relay on Switches


• Solid understanding of routing protocols, static routes and ARP cache


• Proficient in creating and implementing certificates on layer 2 devices (Switches, Firewalls, Linux Appliances)


• Strong troubleshooting skills and possess the ability to find security and network issues in a timely manner


• Strong Windows administration skills including Active Directory/GPO's and security policies


• Solid working knowledge of Virtualization, such as VMware ESXi servers and vCenter 7.x


• Solid working knowledge of Veeam/Bacula/Exagrid backup software to manage backup and restore procedures

.

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, and Los Angeles County Fair Chance Ordinance.