Network Security Engineer

Role overview

Responsibilities

• Design, deploy and maintain secure network architectures across multi-cloud environments, including cloud network gateways, security groups and cloud-native firewalls.
• Develop and integrate AI-enhanced network automation and SOAR playbooks for threat containment, firewall provisioning and anomalous traffic mitigation.
• Use AIOps platforms and machine-learning analytics to identify behavioral anomalies, reduce alert fatigue and predictively route network or security events.
• Manage and optimize next-generation firewalls, IDS/IPS and SASE or ZTNA solutions.
• Act as a Level 2 escalation point for network security incidents, conducting packet analysis, threat hunting and post-incident forensic reviews.
• Maintain compliance with frameworks such as CIS, NIST and SOC 2, and perform automated vulnerability assessments.
• Maintain documentation of network topologies, automation scripts and incident-response procedures.
• Mentor Tier 1 SOC and NOC analysts.

Minimum qualifications

• At least 3 years of dedicated experience in network security engineering, architecture or tier-2 operations.
• Hands-on experience securing infrastructure in AWS, Azure or GCP, with deep knowledge of cloud networking, IAM and micro-segmentation.
• Strong proficiency in one or more of Python, Go or Bash, and Infrastructure-as-Code tools such as Terraform or Ansible.
• Hands-on experience with SOAR platforms and AI-driven network analytics or threat-detection tools.
• Deep understanding of TCP/IP, BGP, OSPF, IPsec/SSL VPNs, DNS and packet-level analysis using tools such as Wireshark or tcpdump.
• Advanced administration experience with enterprise firewalls such as Palo Alto, Fortinet or Check Point.

Preferred qualifications

• Certifications such as CCNP Security, PCNSE, AWS Certified Security – Specialty, Azure Security Engineer Associate or CISSP are preferred.
• Experience deploying and managing SASE platforms such as Zscaler, Prisma Access or Netskope is preferred.
• Understanding of CI/CD pipelines and integration of network security checks into the software development lifecycle is preferred.

Workplace

• The posting describes on-site presence across teams.