Senior Network Security Engineer
Core
Design, implement, and secure hybrid network architecture across on-premises and Azure environments for a hybrid enterprise spanning 300 statewide locations.
Role type
Senior Network Security Engineer
Builds
Secure hybrid network architecture, firewall rules, access controls, and operational documentation
Domain
Enterprise IT, Cloud Security, Network Security
Required skills
Azure networking, WAF/next-generation firewall technologies, incident response, security investigations, log analysis, threat intelligence, security monitoring, SIEM (Splunk/Microsoft Sentinel), vulnerability management, Active Directory, MFA, Conditional Access, Cisco Client/NAC/802.1X/RADIUS/TACACS, Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, GlobalProtect, F5 BIG-IP
Preferred skills
SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles, Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700)
Technologies
Azure, Cisco, Splunk, Palo Alto, F5, ExpressRoute, SD-WAN
Responsibilities
Ensure network security architecture aligns with operational security standards before and after deployment. Lead investigations into network security incidents and coordinate containment and response activities. Review firewall rule requests for compliance with security standards. Design and maintain secure hybrid network architecture across on-premises and Azure environments. Monitor security events using SIEM technologies and conduct proactive threat hunting and anomaly detection. Assess network security and recommend remediation strategies. Develop and maintain network security standards, diagrams, and operational documentation. Support penetration testing and remediation efforts. Participate in on-call support during critical security incidents. Validate WAF and firewall placement, integration, exposure, and connectivity; lead implementation, review, and management of agency WAFs. Diagnose system problems and threats using system logs, line monitors, SIEM, diagnostic software, and test equipment. Identify, prioritize, and remediate network security vulnerabilities.
Seniority
Senior, hands-on IC
