Network Security Engineer

JOB TITLE: Network Security Engineer CCNP 
JOB LOCATION: Northborough, MA travel to Worcester, MA or (Onsite full time 25% travel to other locations) 
WAGE RANGE*: $70-80/hr.
JOB NUMBER: NGGJP00017723

Network Security Engineer

Position Summary
The Network Security Engineer provides technical support for network infrastructure, hardware, applications, and related systems across a multi-site environment. This role is responsible for provisioning, installation, configuration, operation, maintenance, and troubleshooting while ensuring compliance with organizational standards, security requirements, and NERC CIP standards.
The position includes remote-site and data center support, approximately 25% monthly travel by vehicle, and participation in a 24/7 on-call rotation.

Key Responsibilities
Network Administration and Security

Manage and maintain enterprise-grade firewalls, including rule creation, policy reviews, change control, and security hardening.
Configure, monitor, and troubleshoot routers, switches, VLANs, and network segmentation across multiple sites.
Administer and optimize application delivery and load-balancing platforms to ensure high availability and performance.
Perform network vulnerability assessments and port scans; analyze findings and coordinate remediation.
Maintain and report on security patching for firewalls, routers, switches, network appliances, and backup, syslog, and monitoring applications within required timeframes.
Follow NERC CIP standards and meet time-sensitive compliance deadlines.

  
Infrastructure Support and Operations

Support remote sites and data centers, providing smart hands assistance for infrastructure and network equipment.
Install, rack, stack, upgrade, and remove equipment, including performing IOS upgrades.
Troubleshoot and resolve hardware, software, application, and infrastructure issues and outages.
Perform daily monitoring to verify the integrity and availability of hardware, server resources, applications, and critical processes.
Review system and application logs and verify completion of scheduled jobs, including backups.
Manage centralized log collection, monitoring, and alerting to support operational visibility and incident response.
Prepare periodic hardware performance reports to support capacity planning.
Work with vendors to resolve hardware and software issues and support compliance activities.
Participate in a 24/7 on-call rotation, providing application and hardware support.

  
Backup, Recovery, and Configuration Management

Maintain secure network device backups, including automated configuration collection, validation, version management, and restoration procedures.
Perform device backup and recovery activities and participate in disaster recovery exercises.
Track, document, audit, and correct configuration items and changes using established tools and procedures.
Maintain configuration baselines, operating procedures, and change documentation.

  
Documentation, Testing, and Collaboration

Develop and maintain detailed network diagrams, topology maps, and design documentation using Microsoft Visio.
Design test cases, create test scripts and test data, and automate repeatable tasks.
Execute and document manual and automated testing, reporting results, issues, and risks.
Perform standard installation tests, investigate faults, and document findings according to established procedures.
Lead work efforts and coordinate resources within the team and across functions to achieve key outcomes.
Collaborate with security, infrastructure, application teams, technical leads, and vendors to define and implement solutions.
Prioritize competing tasks, meet deadlines, and work effectively both independently and collaboratively.
  

  
Key Skills

Firewall Administration and Security Policy Management: Enterprise firewall administration, rule creation, policy optimization, change control, and security hardening.
Routing and Switching: Routing protocols, switching technologies, VLANs, and network segmentation in multi-site environments.
Application Delivery and Load Balancing: Traffic distribution, health monitoring, performance tuning, and high-availability configurations.
Vulnerability Assessment: Network scanning, findings analysis, risk prioritization, and remediation coordination.
Log Management and Monitoring: Centralized log aggregation, alert configuration, diagnostics, and incident response.
Backup and Recovery: Secure device backups, automated collection workflows, version management, restoration, and disaster recovery.
Core Networking: TCP/IP, routing protocols, DNS, DHCP, SNMP, VPN technologies, and network security best practices.
Troubleshooting and Diagnostics: Analysis of traffic flows, logs, performance metrics, and packet captures to identify root causes.
Systems Installation and Configuration Management: Equipment installation and removal, configuration tracking, audits, and corrective actions.
Testing and Automation: Test case development, scripting, manual and automated testing, and results documentation.
Documentation and Communication: Network diagrams, operating procedures, configuration records, and clear communication with technical teams and stakeholders.

Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities

* While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions. Benefits offered are in accordance with applicable federal, state, and local laws and subject to change at TCM's discretion.