Network Security Engineer with AWS/F2F Required

Network Security Engineer with AWS/F2F Required
Location: South San Francisco (Hybrid)

Long Term

Responsibilities & Duties
Network Operations & Engineering

• Design, configure, maintain, and support secure and highly available network infrastructure, including:
• Cisco switching (core, distribution, and access layers)
• Meraki wireless and switching
• Palo Alto firewalls (policy, NAT, VPN, segmentation)
• Identify, troubleshoot, and resolve network failures, latency, and performance issues across office, lab, and data center environments.
• Implement and maintain network segmentation strategies to support security, compliance, and lab isolation requirements.
• Manage ISP connectivity, WAN circuits, VPNs, and remote access solutions.
• Participate in an on-call rotation and provide after-hours escalation support as needed.

Cloud & Hybrid Networking

• Design and support AWS networking, including:
• VPC architecture, routing, and security controls
• Site-to-site and client VPNs
• Integration with on-premises networks
• AWS Direct Connect and hybrid connectivity

Experience & Qualifications

• 5+ years of experience supporting medium to large enterprise networks as a Network Engineer or Network Administrator.
• Strong hands-on experience with:
• Cisco switching (VLANs, STP, routing, QoS)
• Meraki Wi-Fi (design, tuning, troubleshooting)
• Palo Alto firewalls (security policies, NAT, VPNs)
• Solid understanding of networking fundamentals:
• TCP/IP, DNS, DHCP
• Routing protocols and network design principles
• VLANs, trunking, segmentation, and access control
• Experience with network monitoring and troubleshooting in complex environments.
• Experience integrating networks with AWS, including VPC design and Direct Connect.
• Working knowledge of virtualization platforms (e.g., VMware).
• Familiarity with Windows Server networking services.
• Experience managing SSL/TLS certificates and secure communications.
• Strong troubleshooting skills, attention to detail, and ability to work independently.
• Passion for networking, security, and protecting sensitive data.

Preferred Qualifications

• Cisco certifications (CCNA, CCNP, or higher) or equivalent experience.
• Experience in regulated environments (biotech, healthcare, pharma).
• Exposure to zero-trust or advanced network security architectures.