Note: The job is a remote job and is open to candidates in USA. The hiring employer is confidential. The Network Security Engineer will harden and modernize enterprise network infrastructure by governing firewall policies, strengthening segmentation, decommissioning legacy infrastructure, and maintaining security documentation and compliance.
Responsibilities
- **Audit & Rationalization:** Systematically review and audit existing firewall rule sets and Access Control Lists (ACLs) across the global enterprise to eliminate redundant, outdated, or overly permissive entries
- **Policy Management:** Assist in developing and enforcing standardized management procedures for all firewall and ACL modifications, ensuring every change aligns with established security policies and compliance frameworks
- **Architectural Review**: Evaluate and enhance network segmentation strategies—including micro-segmentation—to minimize the attack surface and prevent lateral movement by malicious actors
- **Trust Zone Enforcement:** Design and implement new VLANs and routing policies to ensure rigorous logical separation between diverse trust zones, including Student, Faculty, Research, IoT, and Administrative networks
- **Cleanup Operations:** Identify and execute the orderly decommissioning of legacy network segments, unused VLANs, and obsolete hardware configurations
- **Infrastructure Migration:** Lead the remediation and consolidation of specialized networks, specifically focusing on the phase-out and migration of the OpNet infrastructure to modern, standardized platforms
- **Topology Management:** Maintain accurate, high-fidelity network topology diagrams and documentation for all security-related changes and segmentation schemes
- **Regulatory Alignment:** Validate that all network cleanup and security activities adhere strictly to internal GOIS (Global Office of Information Security) mandates and external regulatory standards
Benefits
- Remote (EST hours)
Company Overview
Company H1B Sponsorship