Senior Lead Engineer, Cybersecurity, Network Security

Work Flexibility: Hybrid Position Summary The Network Security Engineer is responsible for designing, reviewing, implementing, and supporting enterprise network security architectures to protect the organization’s infrastructure, applications, and external connectivity from cybersecurity threats. This role combines strong network security engineering and architecture expertise with hands-on cybersecurity operations experience. The ideal candidate can independently assess network security risks, design appropriate security controls, and support security investigations in collaboration with Cybersecurity, SOC, and Incident Response teams. The role focuses on securing Internet-facing applications, DMZs, extranets, third-party connectivity, network segmentation, and enterprise security boundaries. This is a cybersecurity-focused engineering position, not primarily a network infrastructure support or firewall administration role. What will you do: Design, review, and implement secure network architectures for enterprise, cloud, hybrid, and remote environments. Evaluate and secure DMZs, extranets, Internet-facing applications, third-party connections, and external access pathways. Identify network security risks and define appropriate technical controls, including firewall policies, segmentation, access restrictions, encryption, monitoring, and compensating controls. Establish and maintain security zones, network segmentation, and trust boundaries to reduce unauthorized access and lateral movement. Engineer and manage enterprise security technologies, including Next-Generation Firewalls (NGFW), VPN, IDS/IPS, Network Access Control (NAC), and related perimeter security solutions. Investigate suspicious network activity and support cybersecurity incident response by analyzing firewall logs, network traffic, packet captures, and security alerts. Collaborate with SOC, Incident Response, and other Cybersecurity teams to improve threat visibility, detection, containment, and remediation. Conduct network security assessments, architecture reviews, vulnerability remediation, and security control validation. Support secure network connectivity across data centers, cloud platforms, corporate environments, and third-party networks. Develop and maintain technical documentation, security standards, and architecture recommendations. Required Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field. Minimum of 6 years of relevant experience in enterprise network security engineering. Demonstrated hands-on experience designing or reviewing network security architectures, including DMZs, Internet-facing environments, extranets, third-party connectivity, or security zones. Experience identifying network security risks and designing or implementing appropriate security controls. Strong hands-on experience with enterprise firewalls, such as Palo Alto Networks, Cisco, Check Point, Fortinet, or equivalent technologies. Practical knowledge of network security protocols and technologies, including VPN, routing, TCP/IP, network segmentation, and perimeter security. Experience investigating security events, analyzing firewall logs or packet captures, troubleshooting suspicious network activity, or supporting cybersecurity incident response. Ability to work collaboratively with Cybersecurity, SOC, and Incident Response teams. Preferred Qualifications Experience with cloud network security across AWS, Microsoft Azure, or Google Cloud. Knowledge of Zero Trust principles, microsegmentation, IDS/IPS, NAC, DNS security, and DDoS protection. Experience with SIEM or security monitoring platforms, such as Splunk or Microsoft Sentinel. Familiarity with network security automation, scripting, APIs, or Infrastructure as Code. Relevant certifications, such as PCNSE, CCNP Security, Fortinet, Check Point, CISSP, or equivalent. Knowledge of security frameworks such as NIST Cybersecurity Framework and CIS Controls. Travel Percentage: 10%