Note: The job is a remote job and is open to candidates in USA. ECS is seeking an experienced Network & Security Infrastructure Engineer to support a complex enterprise environment. The role will lead the re-architecture of a VMware ESXi environment for firewall and VLAN-based network segmentation while administering enterprise firewalls and supporting Cisco and Aruba network infrastructure from a security-focused perspective.
Responsibilities
- Hands-on experience designing and re-architecting VMware ESXi environments in an enterprise setting
- Ability to plan and implement VLAN segmentation strategies within virtualized infrastructure to support firewall enforcement and proper traffic isolation
- Experience configuring virtual switches, distributed switches, and virtual port groups in support of security segmentation objectives
- Familiarity with NSX or equivalent software-defined networking (SDN) platforms as they relate to micro-segmentation and east-west traffic control
- Ability to document virtual network architecture clearly and thoroughly, including design decisions, configurations, and future-state plans
- Hands-on experience configuring and administering enterprise-class firewall technologies, with specific experience on Check Point and Palo Alto platforms
- Ability to implement new firewall architectures, upgrades, and feature rollouts as directed
- Experience administering firewall policy including updates, upgrades, policy administration, and validation
- Proficiency managing and tuning software blades and associated security features such as IPS, URL filtering, Application Control, antivirus, and advanced malware detection
- Ability to review and implement changes consistent with existing firewall policies while maintaining thorough, up-to-date documentation
- Strong knowledge of firewall rules, security policies, and security operations within a large enterprise environment
- Willingness to work outside of normal business hours when required to support outage resolution or planned maintenance
- Strong hands-on experience with Cisco network infrastructure including routing, switching, and network security configurations in an enterprise setting
- Experience supporting and securing Aruba wireless access point environments
- Solid understanding of core networking protocols including TCP/IP, BGP, OSPF, VLANs, and VPNs
- Ability to monitor and analyze network architecture, communication flows, policies, and protocols from a cybersecurity perspective
- Experience identifying and isolating network-based security issues quickly during incidents and outages
- Familiarity with network access control concepts and how they integrate with broader security operations
- Ability to collaborate across teams including cybersecurity, systems administration, and technology support partners
- Experience supporting security continuous monitoring efforts such as risk assessments, vulnerability identification, and patch coordination
- Ability to create and maintain clear, accurate documentation for virtual, network, and firewall configurations, procedures, and troubleshooting steps
- Comfortable communicating technical findings and infrastructure risk clearly to both technical peers and senior leadership
Skills
- * Hands-on experience designing and re-architecting VMware ESXi environments in an enterprise setting
- * Ability to plan and implement VLAN segmentation strategies within virtualized infrastructure to support firewall enforcement and proper traffic isolation
- * Experience configuring virtual switches, distributed switches, and virtual port groups in support of security segmentation objectives
- * Familiarity with NSX or equivalent software-defined networking (SDN) platforms as they relate to micro-segmentation and east-west traffic control
- * Ability to document virtual network architecture clearly and thoroughly, including design decisions, configurations, and future-state plans
- * Hands-on experience configuring and administering enterprise-class firewall technologies, with specific experience on Check Point and Palo Alto platforms
- * Ability to implement new firewall architectures, upgrades, and feature rollouts as directed
- * Experience administering firewall policy including updates, upgrades, policy administration, and validation
- * Proficiency managing and tuning software blades and associated security features such as IPS, URL filtering, Application Control, antivirus, and advanced malware detection
- * Ability to review and implement changes consistent with existing firewall policies while maintaining thorough, up-to-date documentation
- * Strong knowledge of firewall rules, security policies, and security operations within a large enterprise environment
- * Willingness to work outside of normal business hours when required to support outage resolution or planned maintenance
- * Strong hands-on experience with Cisco network infrastructure including routing, switching, and network security configurations in an enterprise setting
- * Experience supporting and securing Aruba wireless access point environments
- * Solid understanding of core networking protocols including TCP/IP, BGP, OSPF, VLANs, and VPNs
- * Ability to monitor and analyze network architecture, communication flows, policies, and protocols from a cybersecurity perspective
- * Experience identifying and isolating network-based security issues quickly during incidents and outages
- * Familiarity with network access control concepts and how they integrate with broader security operations
- * Ability to collaborate across teams including cybersecurity, systems administration, and technology support partners
- * Experience supporting security continuous monitoring efforts such as risk assessments, vulnerability identification, and patch coordination
- * Ability to create and maintain clear, accurate documentation for virtual, network, and firewall configurations, procedures, and troubleshooting steps
- * Comfortable communicating technical findings and infrastructure risk clearly to both technical peers and senior leadership
- A minimum of 5+ years of experience in network security engineering or a closely related infrastructure discipline is required
- Direct hands-on experience on both Check Point and Palo Alto platforms strongly preferred
- Candidates who bring demonstrated experience with VMware ESXi re-architecture and VLAN segmentation design — in addition to enterprise networking and firewall administration — will be given strong preference over candidates with depth in only one or two of these areas
Benefits
- Remote work arrangement
Company Overview