Senior Network Security Engineer :: Mechanicsville, VA (Hybrid)

Senior Network Security Engineer

Location: Mechanicsville, VA (Hybrid)

Duration: 9 Months

Seeking for an experienced Sr Network Security Engineer (Sr NSE) to implement and support our IT network, cloud, and computing infrastructure. The Sr NSE will play a critical role in securing our infrastructure and supporting a hybrid enterprise environment with approximately 300 statewide locations.

Key Responsibilities:

• Ensure network security architecture aligns with operational security standards.
• Lead investigation and containment of network security incidents.
• Review firewall rule requests for compliance with security standards.
• Design and maintain secure hybrid network architecture across on-premises and Azure environments.
• Monitor security events using SIEM technologies and coordinate incident response activities.
• Perform network security assessments and recommend remediation strategies.
• Develop and maintain network security standards, diagrams, and documentation.
• Support penetration testing and remediation efforts.
• Participate in on-call support during critical security incidents.
• Conduct proactive threat hunting and anomaly detection.
• Validate WAF and firewall placement and integration exposure/connectivity.
• Identify and diagnose system problems and threats using various tools.
• Identify, prioritize, and remediate network security vulnerabilities.
• Provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls as needed.
• Work independently on assigned projects.

Must Have Skills:

• 8 Years of Enterprise Networking experience.
• 5 Years of Enterprise Security experience.
• 3 Years of Azure Networking experience.
• 3 Years of WAF/NGFW experience.
• Experience supporting environments with 300+ Network Devices.
• Experience in incident response, security investigations, log analysis, threat intelligence, and security monitoring.
• Experience with SIEM products (e.g., Splunk, Microsoft Sentinel).
• Experience in vulnerability management and remediation tracking, as well as vulnerability scanning tools (e.g., Nessus, Tenable).
• Experience with Active Directory, MFA, Conditional Access, Certificates.
• Experience with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles.
• Experience with Cisco ISE, NAC, 802.1X, RADIUS, TACACS.
• Experience with Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP.
• Experience in highly regulated environments and leading technical troubleshooting during outages.
• Ability to communicate technical issues to technical and executive audiences and mentor junior engineers.
• Certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) or ability to achieve them.