Senior Network Security Engineer

Job purpose

Education and certifications

• Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field.
• Master's degree in Information Security, Cybersecurity, or a related discipline is preferred.
• CCNP Security is required; CCIE Security is an advantage.
• CISSP, CISM, CEH, CompTIA Security+, or equivalent certifications are highly desirable.

Experience and expertise

• At least 7–10 years of progressive Network Security Engineering and Cybersecurity experience.
• At least 5 years designing, implementing, and managing enterprise security solutions and secure network architectures.
• Higher education, large-enterprise, or complex multi-site experience is preferred.
• Experience leading security projects and mentoring junior engineers and administrators.
• Expertise in network security architecture, firewalls, IDS/IPS, SIEM, endpoint protection, VPNs, Microsoft 365 Security, Azure Security, IAM, and Zero Trust.
• Knowledge of database, operating-system, cloud, and application security; vulnerability management, penetration testing, threat intelligence, and incident response.
• Understanding of ISO 27001, NIST, CIS Controls, GDPR principles, risk assessment, security auditing, compliance, and governance.
• Experience with Linux, Windows Server, VMware, Hyper-V, cloud infrastructure, SAN, backup, and data protection.
• Knowledge of network protocols, routing, switching, TCP/IP, VLANs, WAN, wireless security, disaster recovery, and business continuity.
• Strong analytical, troubleshooting, communication, documentation, reporting, and presentation skills.
• Must be available for critical incident response and major service outages when required.

Duties and responsibilities

• Lead and optimize the university's network and cybersecurity infrastructure; maintain secure architectures and standards.
• Manage firewalls, IDS/IPS, VPNs, endpoint protection, web security gateways, NAC, and SIEM platforms.
• Perform risk and vulnerability assessments, review penetration tests, and plan remediation; monitor threats and recommend mitigations.
• Maintain information-security policies, procedures, standards, and governance; ensure regulatory, standards, and audit compliance.
• Lead incident response, forensic investigations, root-cause analysis, and post-incident reviews.
• Administer Cisco routers and switches, LAN/WAN and wireless networks, security appliances, Microsoft 365 Security, Active Directory, DNS, DHCP, servers, virtualization, and cloud controls.
• Oversee backup, disaster recovery, and business continuity solutions, including Veeam Backup and Replication.
• Evaluate security technologies; work with stakeholders, vendors, and external auditors; report risks and metrics to senior management.
• Mentor junior network and security personnel and contribute to IT planning and cybersecurity roadmaps.

About the employer