About the Role:
We are seeking a highly skilled Network Security Engineer to architect, deploy, and manage robust network security frameworks for our organization. You will be responsible for safeguarding enterprise network infrastructure, detecting and mitigating security threats, and collaborating with IT, Cloud, and DevOps teams to maintain a secure, resilient, and compliant environment across on-premises and cloud platforms.

Responsibilities:

• Design, implement, and maintain end-to-end network security architectures, including perimeter defenses, micro-segmentation, intrusion detection/prevention systems (IDS/IPS), and zero-trust frameworks.
• Deploy and operationalize Security Management Solutions, such as SIEM, NAC, Vulnerability Management Systems, and Network Access Controls (NAC).
• Configure, manage, and harden network devices (routers, switches, firewalls) using Network Management Systems (NMS) and centralized security policy enforcement.
• Monitor network traffic and security events in real-time, correlate logs, and respond to incidents alongside the Security Operations Center (SOC).
• Troubleshoot complex security incidents, including threat containment, malware isolation, root cause analysis, and remediation.
• Implement and enforce security protocols at the network layer, such as IPSec, VPN, SSL/TLS, AAA, ACLs, and advanced network segmentation.
• Process and track security service requests, including firewall changes, access control, and DNS security updates, following ITIL-aligned change management procedures.
• Maintain comprehensive network security documentation, including topology diagrams, configuration baselines, risk registers, runbooks, and incident response plans.
• Oversee patch and firmware lifecycle management, including vulnerability assessment, prioritization, testing, and deployment.
• Liaise with vendors to remediate security advisories and CVEs promptly.
• Conduct security assessments, risk reviews, and internal audits to ensure compliance with ISO 27001, NIST, GDPR, and other regulatory frameworks.
• Collaborate with IT, DevOps, and Cloud teams to integrate secure networking best practices and automation using Python, Bash, PowerShell, or configuration management tools such as Ansible or Puppet.
• Perform additional duties as assigned by Security Leadership or the Institute.

Requirements:

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field.
• 5-8 years of hands-on experience in network security engineering, security infrastructure management, or security operations.
• Expertise in network security protocols: IPSec, SSL/TLS, 802.1X, DNSSEC.
• Proficiency with firewalls and security appliances: Palo Alto, Fortinet, Cisco ASA, IDS/IPS, UTM.
• Experience with authentication and authorization frameworks: RADIUS, TACACS+, MFA.
• Strong understanding of routing and switching security: OSPF/BGP hardening, Layer 2 protections.
• Hands-on experience with enterprise NMS/SIEM platforms: Splunk, QRadar, ArcSight, SolarWinds, or Elastic SIEM.
• Proven experience in vulnerability assessment, patch management, and configuration hardening.
• Familiarity with ITIL processes and change management practices is a plus.