We are a federal IT company on a mission to make customer experience (CX) the center of every government solution. Technology is our Passion. People are our Purpose. We know tech, but we love people. NuAxis is home to thinkers and feelers, engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it's a state of mind. We believe happy employees do amazing work, so join our team NOW! We are currently seeking a talented and motivated Corporate IT Systems Administrator for a full-time position. Position Summary: The Corporate IT Systems Administrator is responsible for the day-to-day administration, support, security, and maintenance of NuAxis Innovations' corporate technology environment. Reporting to the Director, Program Management Office, this position provides hands-on technical support across cloud infrastructure, networks, endpoints, corporate systems, websites, user access, software licensing, and IT assets at the Corporate Headquarters in Vienna, VA. This role serves as a primary internal technical resource for employees and helps ensure the company's technology environment is secure, reliable, properly licensed, documented, and aligned with organizational requirements. The successful candidate will independently resolve routine and moderately complex issues, identify recurring problems and risks, improve processes, and escalate advanced infrastructure or security matters when appropriate. Key Responsibilities Azure & Cloud Administration Support the administration, maintenance, and documentation of the company's Microsoft Azure environment. Monitor Azure resources, configurations, permissions, and usage; assist with cloud troubleshooting and optimization. Maintain appropriate administrative access and escalate architecture, security, or capacity concerns. Microsoft 365, Identity & Access Management Administer Microsoft 365 accounts, groups, licenses, permissions, and related services. Support Microsoft Entra ID administration, including authentication, multifactor authentication, role-based access, and account recovery. Provision, modify, review, and remove access based on approved business requirements and least-privilege principles. Monitor usage and licensing and identify opportunities to reclaim or optimize licenses. Network & Firewall Administration Administer and support corporate wired, wireless, remote-access, and VPN connectivity. Configure, monitor, troubleshoot, and maintain network equipment and services. Administer corporate firewall configurations and access in accordance with established security requirements. Maintain network and firewall documentation and coordinate escalated support with vendors or specialized resources. Endpoint, Imaging & Asset Management Configure, image, deploy, maintain, and support company computers and related equipment. Administer endpoints through Microsoft Intune and other approved management tools. Maintain standard device configurations and support operating system, application, security, and configuration updates. Manage the IT asset lifecycle, including inventory, assignment, transfer, recovery, replacement, secure disposition, warranty status, and refresh planning. Software & License Administration Administer corporate software subscriptions, licenses, user assignments, renewals, and administrative ownership. Provision and remove software access as employees join, leave, or change roles. Maintain accurate records of applications, licenses, administrative accounts, and assigned users. Coordinate software purchasing and renewal requirements with Finance, Procurement, and business owners. Website Administration Support the administration and maintenance of NuAxis internal and external websites. Coordinate website updates, permissions, availability, and technical troubleshooting with internal stakeholders and external vendors. Maintain appropriate administrative access and supporting technical documentation. Internal Customer Support Serve as a primary point of contact for internal IT support requests. Troubleshoot issues involving computers, software, Microsoft 365, accounts, permissions, connectivity, and corporate applications. Document, prioritize, resolve, and appropriately escalate service requests while communicating status and resolution clearly. Identify recurring issues and recommend permanent fixes, automation, documentation, or process improvements. Employee Lifecycle Support Provision employee accounts, equipment, software licenses, and approved access for onboarding. Modify access and licensing when employee responsibilities change. Disable accounts, revoke access, recover licenses, and coordinate equipment return during offboarding. Maintain records demonstrating completion of employee lifecycle activities. Security, Compliance & Process Documentation Implement established access-control, endpoint-security, and IT operating requirements. Identify and promptly escalate suspected security incidents, vulnerabilities, and configuration risks. Support remediation, audits, assessments, and evidence collection related to corporate IT systems. Maintain procedures, work instructions, configuration records, access records, inventories, and other required operational documentation. Support IT processes and documentation required by CMMI and other applicable management-system requirements. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline, or an equivalent combination of education, training, and relevant experience. Three to five years of relevant experience in IT systems administration, infrastructure administration, or corporate IT support. Comptia A+ Hands-on experience supporting Microsoft Azure and Microsoft 365 environments. Experience with Microsoft Entra ID, identity and access management, permissions, multifactor authentication, and role-based access. Experience administering Windows endpoints and endpoint-management technologies such as Microsoft Intune. Experience supporting corporate networks, VPNs, firewalls, and network troubleshooting. Experience imaging, deploying, maintaining, and troubleshooting computers and peripherals. Experience with IT asset management and software-license administration. Demonstrated learning agility, including the ability to quickly understand new technologies, troubleshoot unfamiliar systems, and independently develop proficiency with evolving tools and platforms. Strong troubleshooting, analytical, organizational, and technical-documentation skills. Ability to communicate technical issues clearly to technical and nontechnical audiences, manage competing priorities, protect sensitive information, and escalate issues appropriately. Preferred Qualifications Experience supporting CMMI requirements, processes, documentation, or assessments. Current Microsoft Azure certification, such as Microsoft Certified: Azure Administrator Associate. Additional Microsoft 365, endpoint administration, networking, or security certification. Experience using Nextthink for digital employee experience, endpoint visibility, or IT operations. Familiarity with Barracuda Backup or comparable backup, recovery, and disaster-recovery technologies. Familiarity with Drupal administration, including user access, modules, updates, configuration, and technical troubleshooting. Experience working in a government contracting environment. Experience supporting internal and external corporate websites. Core Technologies & Areas of Responsibility Microsoft Azure • Microsoft 365 • Microsoft Entra ID • Microsoft Intune • Nextthink • Windows • Networking • Firewalls and VPN • Endpoint Management • IT Asset Management • Software Licensing • Website Administration • Identity and Access Management Success in This Role Employee accounts, equipment, access, and licenses are provisioned and removed accurately and on time. Hardware, software, and licensing inventories are complete, current, and reconcilable to employee records. Endpoints, networks, and cloud services are actively administered, documented, and supported. Internal support requests are resolved promptly or escalated with clear documentation and ownership. Administrative access and security-related issues are identified, documented, remediated, or escalated appropriately. Recurring IT activities become more standardized, measurable, and automated over time. Working Relationships This position works closely with the Program Management Office, People & Culture, Information Security, Finance and Procurement, program and delivery leadership, employees and managers, and external technology vendors and service providers. Does this opportunity sound like a fit for you? If so, join our talent community and click to apply now Our Profile: We are an IT company with a unique mission-to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed. Time after time, programs failed because the focus was on the tools and products and not the people using them. Learn More. NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture!
11/13/2026
Full time
We are a federal IT company on a mission to make customer experience (CX) the center of every government solution. Technology is our Passion. People are our Purpose. We know tech, but we love people. NuAxis is home to thinkers and feelers, engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it's a state of mind. We believe happy employees do amazing work, so join our team NOW! We are currently seeking a talented and motivated Corporate IT Systems Administrator for a full-time position. Position Summary: The Corporate IT Systems Administrator is responsible for the day-to-day administration, support, security, and maintenance of NuAxis Innovations' corporate technology environment. Reporting to the Director, Program Management Office, this position provides hands-on technical support across cloud infrastructure, networks, endpoints, corporate systems, websites, user access, software licensing, and IT assets at the Corporate Headquarters in Vienna, VA. This role serves as a primary internal technical resource for employees and helps ensure the company's technology environment is secure, reliable, properly licensed, documented, and aligned with organizational requirements. The successful candidate will independently resolve routine and moderately complex issues, identify recurring problems and risks, improve processes, and escalate advanced infrastructure or security matters when appropriate. Key Responsibilities Azure & Cloud Administration Support the administration, maintenance, and documentation of the company's Microsoft Azure environment. Monitor Azure resources, configurations, permissions, and usage; assist with cloud troubleshooting and optimization. Maintain appropriate administrative access and escalate architecture, security, or capacity concerns. Microsoft 365, Identity & Access Management Administer Microsoft 365 accounts, groups, licenses, permissions, and related services. Support Microsoft Entra ID administration, including authentication, multifactor authentication, role-based access, and account recovery. Provision, modify, review, and remove access based on approved business requirements and least-privilege principles. Monitor usage and licensing and identify opportunities to reclaim or optimize licenses. Network & Firewall Administration Administer and support corporate wired, wireless, remote-access, and VPN connectivity. Configure, monitor, troubleshoot, and maintain network equipment and services. Administer corporate firewall configurations and access in accordance with established security requirements. Maintain network and firewall documentation and coordinate escalated support with vendors or specialized resources. Endpoint, Imaging & Asset Management Configure, image, deploy, maintain, and support company computers and related equipment. Administer endpoints through Microsoft Intune and other approved management tools. Maintain standard device configurations and support operating system, application, security, and configuration updates. Manage the IT asset lifecycle, including inventory, assignment, transfer, recovery, replacement, secure disposition, warranty status, and refresh planning. Software & License Administration Administer corporate software subscriptions, licenses, user assignments, renewals, and administrative ownership. Provision and remove software access as employees join, leave, or change roles. Maintain accurate records of applications, licenses, administrative accounts, and assigned users. Coordinate software purchasing and renewal requirements with Finance, Procurement, and business owners. Website Administration Support the administration and maintenance of NuAxis internal and external websites. Coordinate website updates, permissions, availability, and technical troubleshooting with internal stakeholders and external vendors. Maintain appropriate administrative access and supporting technical documentation. Internal Customer Support Serve as a primary point of contact for internal IT support requests. Troubleshoot issues involving computers, software, Microsoft 365, accounts, permissions, connectivity, and corporate applications. Document, prioritize, resolve, and appropriately escalate service requests while communicating status and resolution clearly. Identify recurring issues and recommend permanent fixes, automation, documentation, or process improvements. Employee Lifecycle Support Provision employee accounts, equipment, software licenses, and approved access for onboarding. Modify access and licensing when employee responsibilities change. Disable accounts, revoke access, recover licenses, and coordinate equipment return during offboarding. Maintain records demonstrating completion of employee lifecycle activities. Security, Compliance & Process Documentation Implement established access-control, endpoint-security, and IT operating requirements. Identify and promptly escalate suspected security incidents, vulnerabilities, and configuration risks. Support remediation, audits, assessments, and evidence collection related to corporate IT systems. Maintain procedures, work instructions, configuration records, access records, inventories, and other required operational documentation. Support IT processes and documentation required by CMMI and other applicable management-system requirements. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline, or an equivalent combination of education, training, and relevant experience. Three to five years of relevant experience in IT systems administration, infrastructure administration, or corporate IT support. Comptia A+ Hands-on experience supporting Microsoft Azure and Microsoft 365 environments. Experience with Microsoft Entra ID, identity and access management, permissions, multifactor authentication, and role-based access. Experience administering Windows endpoints and endpoint-management technologies such as Microsoft Intune. Experience supporting corporate networks, VPNs, firewalls, and network troubleshooting. Experience imaging, deploying, maintaining, and troubleshooting computers and peripherals. Experience with IT asset management and software-license administration. Demonstrated learning agility, including the ability to quickly understand new technologies, troubleshoot unfamiliar systems, and independently develop proficiency with evolving tools and platforms. Strong troubleshooting, analytical, organizational, and technical-documentation skills. Ability to communicate technical issues clearly to technical and nontechnical audiences, manage competing priorities, protect sensitive information, and escalate issues appropriately. Preferred Qualifications Experience supporting CMMI requirements, processes, documentation, or assessments. Current Microsoft Azure certification, such as Microsoft Certified: Azure Administrator Associate. Additional Microsoft 365, endpoint administration, networking, or security certification. Experience using Nextthink for digital employee experience, endpoint visibility, or IT operations. Familiarity with Barracuda Backup or comparable backup, recovery, and disaster-recovery technologies. Familiarity with Drupal administration, including user access, modules, updates, configuration, and technical troubleshooting. Experience working in a government contracting environment. Experience supporting internal and external corporate websites. Core Technologies & Areas of Responsibility Microsoft Azure • Microsoft 365 • Microsoft Entra ID • Microsoft Intune • Nextthink • Windows • Networking • Firewalls and VPN • Endpoint Management • IT Asset Management • Software Licensing • Website Administration • Identity and Access Management Success in This Role Employee accounts, equipment, access, and licenses are provisioned and removed accurately and on time. Hardware, software, and licensing inventories are complete, current, and reconcilable to employee records. Endpoints, networks, and cloud services are actively administered, documented, and supported. Internal support requests are resolved promptly or escalated with clear documentation and ownership. Administrative access and security-related issues are identified, documented, remediated, or escalated appropriately. Recurring IT activities become more standardized, measurable, and automated over time. Working Relationships This position works closely with the Program Management Office, People & Culture, Information Security, Finance and Procurement, program and delivery leadership, employees and managers, and external technology vendors and service providers. Does this opportunity sound like a fit for you? If so, join our talent community and click to apply now Our Profile: We are an IT company with a unique mission-to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed. Time after time, programs failed because the focus was on the tools and products and not the people using them. Learn More. NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture!
Job Description Job Description Job Title: Security Analyst - Consultant ( 14268) Location: Columbia, SC 29201 Fully Onsite - 5 Days/Week Duration: 12 Months Interview Process: 2 Rounds - 1st Round Virtual, 2nd Round Onsite in Columbia, SC Candidate Location: Candidate MUST be a current South Carolina resident. No relocation allowed. Required Skills BS degree in Computer Science, Information Systems, Cybersecurity, or related field; or equivalent experience Network-security-centric certification such as PCNSE or CCNA 3-5 years of hands-on experience in network design, implementation, or support Hands-on experience in IT security or system administration Working knowledge of secure network design Working knowledge of security architecture Experience with compliance tools Understanding of data protection and access models Ability to analyze logs, alerts, and network telemetry Proficiency with Microsoft Office tools Technical Experience Secure network design principles Windows, macOS, and Linux operating systems Switching and routing Enterprise firewalls Network auditing IDS/IPS platforms Network security monitoring SIEM platforms such as QRadar or Splunk Vulnerability scanning tools such as Nessus or Qualys Cloud infrastructure security Preferred Skills CISSP or Security+ Experience working in regulated environments Experience supporting Health IT Experience supporting State Government Familiarity with FISMA Familiarity with NIST Familiarity with CMS ARC-AMPE Familiarity with HIPAA security and privacy standards Experience with Azure or AWS cloud network security controls Responsibilities Assist in maturing network security and compliance solutions Investigate and respond to daily network security alerts Perform network security assessments for proposed firewall and infrastructure changes Conduct technical analysis for network security planning and engineering Review connectivity, website-blocking, and firewall-rule requests to identify potential security risks Analyze on-premise and cloud networks for potential threats Develop, review, and analyze network traffic reports involving approved ports, protocols, and services Monitor emerging threat vectors and recommend countermeasures Collaborate with agency teams to implement appropriate security controls Support cloud and on-premise network changes and enhancement projects Support compliance activities involving CMS ARC-AMPE, HIPAA, and SCDIS-200 Assist with KPI creation and security trend monitoring Participate in firewall configuration reviews and ruleset recertification Provide network-security best-practice guidance to technical teams Perform additional SOC duties as assigned About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18+ years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.
11/13/2026
Full time
Job Description Job Description Job Title: Security Analyst - Consultant ( 14268) Location: Columbia, SC 29201 Fully Onsite - 5 Days/Week Duration: 12 Months Interview Process: 2 Rounds - 1st Round Virtual, 2nd Round Onsite in Columbia, SC Candidate Location: Candidate MUST be a current South Carolina resident. No relocation allowed. Required Skills BS degree in Computer Science, Information Systems, Cybersecurity, or related field; or equivalent experience Network-security-centric certification such as PCNSE or CCNA 3-5 years of hands-on experience in network design, implementation, or support Hands-on experience in IT security or system administration Working knowledge of secure network design Working knowledge of security architecture Experience with compliance tools Understanding of data protection and access models Ability to analyze logs, alerts, and network telemetry Proficiency with Microsoft Office tools Technical Experience Secure network design principles Windows, macOS, and Linux operating systems Switching and routing Enterprise firewalls Network auditing IDS/IPS platforms Network security monitoring SIEM platforms such as QRadar or Splunk Vulnerability scanning tools such as Nessus or Qualys Cloud infrastructure security Preferred Skills CISSP or Security+ Experience working in regulated environments Experience supporting Health IT Experience supporting State Government Familiarity with FISMA Familiarity with NIST Familiarity with CMS ARC-AMPE Familiarity with HIPAA security and privacy standards Experience with Azure or AWS cloud network security controls Responsibilities Assist in maturing network security and compliance solutions Investigate and respond to daily network security alerts Perform network security assessments for proposed firewall and infrastructure changes Conduct technical analysis for network security planning and engineering Review connectivity, website-blocking, and firewall-rule requests to identify potential security risks Analyze on-premise and cloud networks for potential threats Develop, review, and analyze network traffic reports involving approved ports, protocols, and services Monitor emerging threat vectors and recommend countermeasures Collaborate with agency teams to implement appropriate security controls Support cloud and on-premise network changes and enhancement projects Support compliance activities involving CMS ARC-AMPE, HIPAA, and SCDIS-200 Assist with KPI creation and security trend monitoring Participate in firewall configuration reviews and ruleset recertification Provide network-security best-practice guidance to technical teams Perform additional SOC duties as assigned About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18+ years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.
Cambridge International Systems Inc
Adams Run, South Carolina
Job Description Job Description AWS DevSecOps Engineer - Secret North Charleston, SC Cambridge International Systems, Inc. Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you'll work alongside top talent worldwide, tackling some of today's most complex and critical challenges in defense and security. We are currently seeking an AWS DevSecOps Engineer to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, SC. This is a full-time, CONUS, on-site office position requiring attendance five days per week, with one optional telework day. An active DoD Secret security clearance is required. What You'll Do As an AWS DevSecOps Engineer, you will combine cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering to design secure systems, automate operations, and ensure the reliability, scalability, and security of AWS cloud environments. An automation-first mindset is critical, with a focus on eliminating manual security tasks through self-healing and compliant infrastructure. You will: Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing. Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline. Automate operational tasks and security workflows using Python, Bash, or Go. Create SOAR-style automated incident response playbooks and threat detection routines. Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube. Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation). Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment. Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management. Deploy, configure, and manage AWS-native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs. Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS. Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats. Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services. Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch. Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management. Conduct performance, availability, and security assessments across cloud and container environments. Troubleshoot incidents, perform root cause analysis, and implement durable remediation. Maintain system documentation, architecture diagrams, and security procedures. Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations. Automate permission audits and cloud security posture monitoring. Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001. What You'll Bring Required Qualifications: Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position. Education & Experience: Bachelor's degree in Computer Science or related Engineering field from an Accreditation Board for Engineering and Technology (ABET) accredited program. Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps. Current Security+ certification required. Experience overseeing the creation of hybrid software, web, and hardware products from initial specifications through final rollout and maintenance. Technical Expertise: Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security. Strong automation mindset with a history of developing guardrails, auto-remediation, or security tooling. Proficiency in Python, Bash, or Go. Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub. Proficiency with Terraform or CloudFormation. Experience integrating various network operating systems, application programs, and hardware devices through system specification, design, coding, testing, and maintenance support. Clearance: Must have a current and active DoD Secret security clearance. Preferred (Nice to Have): Experience implementing SOAR platforms or building serverless auto-remediation using Lambda/Step Functions. AWS Security Specialty or AWS DevOps Professional certification. Experience securing Kubernetes/EKS workloads and container registries. Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001. Travel Requirements Physical & Work Environment Requirements On-site office environment in North Charleston, SC, requiring attendance five days per week, with one optional telework day. Periods of prolonged sitting and/or standing, including desk-based computer work. Regular use of computers, monitors, networking equipment, and other job-related technology. Work is performed in a secure facility where personal electronic devices (including Bluetooth- or Wi-Fi-enabled devices) may be restricted. Occasional extended work hours, including evenings or weekends, as needed. Communication with team members, customers, and stakeholders through verbal and written methods. Ability to manage competing priorities, work under deadlines, and maintain attention to detail. Vaccine Recommendations by AOR Health.mil Background & Security Employment is contingent upon successful background investigation Alcohol and Drug screening may be required for federal contract compliance Benefits & Perks We believe in investing in our team-both professionally and personally: Medical, dental, vision, life, accident, and critical illness insurance 401(k) immediate vesting and match Paid time off and company holidays Generous tuition & training support Relocation assistance Sign-on and performance-based bonuses Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Cambridge International Systems is committed to investing in our employees and their future by providing them with competitive compensation, career development opportunities and comfortable working conditions. Available to part-time and temporary employees are the benefits below: Referral bonuses Performance-based bonuses Community involvement & outreach Wellness program Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Join Us If you're driven by mission, technology, and teamwork-we want to hear from you. Cambridge is growing, and this position is just one of many opportunities on our global team. Know someone perfect for the role? Referrals are welcome-both employees and non-employees may qualify for a bonus. Apply today and help shape the future of secure cloud computing for national security. About Cambridge International Systems At Cambridge, we believe innovation and agility thrive when people work together. Our culture is built on teamwork, collaboration, and a commitment to listening, learning, and bringing out the best ideas in every employee. We empower our people to take on challenges, persevere to get the job done, and lead with integrity in everything we do. Our commitment to our employees and workplace culture has been recognized through the DAV Patriot Small Employer of the Year Award in 2026 and the Cigna Healthy Workforce Gold Designation in 2025. These recognitions reflect our ongoing commitment to creating a workplace where employees are valued, supported, and empowered to do their best work. At Cambridge, we are proud to foster an environment where people can grow, contribute, and make a meaningful impact. Learn more at . We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to any protected status under applicable law or other similar factors that are not job-related. We encourage all qualified individuals to apply for employment. Selected applicants may be subject to a background investigation and/or education verification. We provide reasonable accommodation for qualified individuals with disabilities in accordance with federal, state, and local law. If you require a reasonable accommodation to participate in the application process or to perform the essential functions of the position, please contact our Recruiting Team at . Powered by JazzHR 5zpssyT3Zw
11/12/2026
Full time
Job Description Job Description AWS DevSecOps Engineer - Secret North Charleston, SC Cambridge International Systems, Inc. Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you'll work alongside top talent worldwide, tackling some of today's most complex and critical challenges in defense and security. We are currently seeking an AWS DevSecOps Engineer to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, SC. This is a full-time, CONUS, on-site office position requiring attendance five days per week, with one optional telework day. An active DoD Secret security clearance is required. What You'll Do As an AWS DevSecOps Engineer, you will combine cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering to design secure systems, automate operations, and ensure the reliability, scalability, and security of AWS cloud environments. An automation-first mindset is critical, with a focus on eliminating manual security tasks through self-healing and compliant infrastructure. You will: Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing. Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline. Automate operational tasks and security workflows using Python, Bash, or Go. Create SOAR-style automated incident response playbooks and threat detection routines. Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube. Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation). Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment. Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management. Deploy, configure, and manage AWS-native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs. Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS. Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats. Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services. Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch. Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management. Conduct performance, availability, and security assessments across cloud and container environments. Troubleshoot incidents, perform root cause analysis, and implement durable remediation. Maintain system documentation, architecture diagrams, and security procedures. Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations. Automate permission audits and cloud security posture monitoring. Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001. What You'll Bring Required Qualifications: Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position. Education & Experience: Bachelor's degree in Computer Science or related Engineering field from an Accreditation Board for Engineering and Technology (ABET) accredited program. Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps. Current Security+ certification required. Experience overseeing the creation of hybrid software, web, and hardware products from initial specifications through final rollout and maintenance. Technical Expertise: Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security. Strong automation mindset with a history of developing guardrails, auto-remediation, or security tooling. Proficiency in Python, Bash, or Go. Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub. Proficiency with Terraform or CloudFormation. Experience integrating various network operating systems, application programs, and hardware devices through system specification, design, coding, testing, and maintenance support. Clearance: Must have a current and active DoD Secret security clearance. Preferred (Nice to Have): Experience implementing SOAR platforms or building serverless auto-remediation using Lambda/Step Functions. AWS Security Specialty or AWS DevOps Professional certification. Experience securing Kubernetes/EKS workloads and container registries. Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001. Travel Requirements Physical & Work Environment Requirements On-site office environment in North Charleston, SC, requiring attendance five days per week, with one optional telework day. Periods of prolonged sitting and/or standing, including desk-based computer work. Regular use of computers, monitors, networking equipment, and other job-related technology. Work is performed in a secure facility where personal electronic devices (including Bluetooth- or Wi-Fi-enabled devices) may be restricted. Occasional extended work hours, including evenings or weekends, as needed. Communication with team members, customers, and stakeholders through verbal and written methods. Ability to manage competing priorities, work under deadlines, and maintain attention to detail. Vaccine Recommendations by AOR Health.mil Background & Security Employment is contingent upon successful background investigation Alcohol and Drug screening may be required for federal contract compliance Benefits & Perks We believe in investing in our team-both professionally and personally: Medical, dental, vision, life, accident, and critical illness insurance 401(k) immediate vesting and match Paid time off and company holidays Generous tuition & training support Relocation assistance Sign-on and performance-based bonuses Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Cambridge International Systems is committed to investing in our employees and their future by providing them with competitive compensation, career development opportunities and comfortable working conditions. Available to part-time and temporary employees are the benefits below: Referral bonuses Performance-based bonuses Community involvement & outreach Wellness program Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Join Us If you're driven by mission, technology, and teamwork-we want to hear from you. Cambridge is growing, and this position is just one of many opportunities on our global team. Know someone perfect for the role? Referrals are welcome-both employees and non-employees may qualify for a bonus. Apply today and help shape the future of secure cloud computing for national security. About Cambridge International Systems At Cambridge, we believe innovation and agility thrive when people work together. Our culture is built on teamwork, collaboration, and a commitment to listening, learning, and bringing out the best ideas in every employee. We empower our people to take on challenges, persevere to get the job done, and lead with integrity in everything we do. Our commitment to our employees and workplace culture has been recognized through the DAV Patriot Small Employer of the Year Award in 2026 and the Cigna Healthy Workforce Gold Designation in 2025. These recognitions reflect our ongoing commitment to creating a workplace where employees are valued, supported, and empowered to do their best work. At Cambridge, we are proud to foster an environment where people can grow, contribute, and make a meaningful impact. Learn more at . We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to any protected status under applicable law or other similar factors that are not job-related. We encourage all qualified individuals to apply for employment. Selected applicants may be subject to a background investigation and/or education verification. We provide reasonable accommodation for qualified individuals with disabilities in accordance with federal, state, and local law. If you require a reasonable accommodation to participate in the application process or to perform the essential functions of the position, please contact our Recruiting Team at . Powered by JazzHR 5zpssyT3Zw
Job Description: Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world's largest organizations, including one of every four Fortune 500 companies. They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection. Schedule & Location Employment type: Full-time, salaried position Location: Remote, within commutable distance of FM's Corporate Office in Johnston, Rhode Island. On-site presence at the Corporate Office is expected 1 to 2 days per week, depending on business needs. Relocation: Relocation assistance is not available for this position Position Summary Come join a newly formed team driving security architecture for a global Fortune 500 company. FM is building its Security Architecture function, and we're looking for a Senior Security Architect to be our subject matter expert for network security. Network security is your starting focus. As the function grows, your scope may expand into other security domains, based on your skills and the organization's needs. In this role, you'll define how network security controls are designed, standardized and governed across a global network that supports dozens of locations in countries around the world. That includes today's offices, internet perimeters and private wide-area networks, and the cloud-first, software-delivered network we're moving toward, with Microsoft Azure at its center. This is an individual contributor role for a forward-thinking architect with deep network security expertise and experience working in a modern cloud and DevOps environment. The ideal candidate connects the threat landscape to architecture decisions and sees the value of managing network and security configuration as code, but can also navigate the code itself or the management console to confirm that implemented configurations and architectures match design intent. What You'll Do Set the standard: Define control design intent, technical standards and evaluation criteria for network security across our global environment. This covers next-generation firewalls (NGFWs), network segmentation, secure ingress and egress, web application firewalls (WAFs), DNS and edge protection, intrusion detection and prevention (IDS/IPS), SASE, ZTNA, and remote and branch access. Build reusable patterns: Create reference architectures and patterns for on-premises, hybrid and Azure environments, including areas that don't have them today, so most work can move forward without case-by-case review. Drive modernization: Own the network security strategy and roadmap, including our move toward secure access service edge (SASE), zero trust network access (ZTNA) and identity- and application-aware segmentation. Sequence the work to align with business direction and stay ahead of evolving threats. Champion security as code: Promote infrastructure-as-code and configuration-as-code practices, along with CI/CD controls, so network and security changes are consistent, peer-reviewed, traceable and auditable. Apply a risk-based approach: Translate security policy and risk intent into clear technical requirements, working with engineering teams to ensure requirements are practical, implementable and appropriate for the environment. Be clear about where controls are required, where they can be tailored and why. Stay connected to implementation: Work closely with network security engineers to understand how designs are implemented in practice. Be comfortable reviewing configurations in firewall, SASE, WAF and cloud consoles and in code repositories, both to validate design intent and to identify opportunities to strengthen or evolve our architecture. Help define criteria for independent control validation and work with engineering teams to interpret and act on the findings. Guide decisions: Review and approve designs, patterns and exceptions against defined criteria, document architecture decisions, and represent security in architecture review forums. Collaborate across teams: Partner closely with enterprise architecture and with the network security, platform, and cloud engineers that operate security controls. Bring architectural perspective together with their hands-on expertise to develop solutions that are secure, practical and operable at scale. Stay close to implementation and work with engineering teams rather than operating platforms directly. Anticipate threats: Keep up with adversary techniques, attacks on network edge and remote access, and changes in platforms and the industry, and design for where the environment is heading. Communicate and mentor: Explain network security risk and requirements clearly to non-security audiences, and help develop other architects through coaching, design review and feedback Qualifications: 8 or more years of experience in IT or cybersecurity, with significant responsibility for network security architecture, engineering or design. Experience designing resilient, redundant global network architectures, including SD-WAN, MPLS and hybrid connectivity. Experience designing enterprise network security architectures, including NGFWs, segmentation, DMZs, secure ingress and egress, and IDS/IPS. Architecture-level experience with enterprise NGFW platforms, and enough hands-on depth to assess configurations directly. Strong Microsoft Azure network security experience, including virtual networks, network security groups, routing, private connectivity, and cloud ingress and egress. Strong networking fundamentals, including BGP, routing, IPsec, VLAN/VRF, load balancing and troubleshooting complex traffic flows. Experience with infrastructure as code, configuration as code, version control and CI/CD practices for network or security changes. Experience designing zero trust segmentation and SASE/ZTNA architectures. Understanding of the current threat landscape and how it informs network security architecture. Familiarity with data protection and data loss prevention concepts, and with how network controls support them. Familiarity with the risks of enterprise AI use. Experience with AI architectures or enterprise AI deployments is a plus but not required. Experience creating reference architectures, reusable control patterns, exception criteria and decision records that hold up across teams. Sound judgment in making and defending decisions when requirements conflict, and in knowing when to escalate. Clear communication with technical and business audiences, and the ability to build agreement across engineering, platform, risk and product teams. Education Bachelor's degree in computer science, information systems, engineering, cybersecurity, or a related field. A comparable combination of education and relevant experience may be considered. Even if your background doesn't match every requirement, we encourage you to apply. The hiring range for this position is $138,000 - $198,000 a year. The final salary offer will vary based on geographic location, individual education, skills, and experience. The position is eligible to participate in FM's comprehensive Total Rewards program that includes an incentive plan, medical, dental and vision insurance, life and disability insurance, well-being programs, a 401(k) and pension plan, career development opportunities, tuition reimbursement, flexible work, and time off, including vacation and sick time. FM is an Equal Opportunity Employer and is committed to attracting, developing, and retaining a diverse workforce.
11/12/2026
Full time
Job Description: Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world's largest organizations, including one of every four Fortune 500 companies. They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection. Schedule & Location Employment type: Full-time, salaried position Location: Remote, within commutable distance of FM's Corporate Office in Johnston, Rhode Island. On-site presence at the Corporate Office is expected 1 to 2 days per week, depending on business needs. Relocation: Relocation assistance is not available for this position Position Summary Come join a newly formed team driving security architecture for a global Fortune 500 company. FM is building its Security Architecture function, and we're looking for a Senior Security Architect to be our subject matter expert for network security. Network security is your starting focus. As the function grows, your scope may expand into other security domains, based on your skills and the organization's needs. In this role, you'll define how network security controls are designed, standardized and governed across a global network that supports dozens of locations in countries around the world. That includes today's offices, internet perimeters and private wide-area networks, and the cloud-first, software-delivered network we're moving toward, with Microsoft Azure at its center. This is an individual contributor role for a forward-thinking architect with deep network security expertise and experience working in a modern cloud and DevOps environment. The ideal candidate connects the threat landscape to architecture decisions and sees the value of managing network and security configuration as code, but can also navigate the code itself or the management console to confirm that implemented configurations and architectures match design intent. What You'll Do Set the standard: Define control design intent, technical standards and evaluation criteria for network security across our global environment. This covers next-generation firewalls (NGFWs), network segmentation, secure ingress and egress, web application firewalls (WAFs), DNS and edge protection, intrusion detection and prevention (IDS/IPS), SASE, ZTNA, and remote and branch access. Build reusable patterns: Create reference architectures and patterns for on-premises, hybrid and Azure environments, including areas that don't have them today, so most work can move forward without case-by-case review. Drive modernization: Own the network security strategy and roadmap, including our move toward secure access service edge (SASE), zero trust network access (ZTNA) and identity- and application-aware segmentation. Sequence the work to align with business direction and stay ahead of evolving threats. Champion security as code: Promote infrastructure-as-code and configuration-as-code practices, along with CI/CD controls, so network and security changes are consistent, peer-reviewed, traceable and auditable. Apply a risk-based approach: Translate security policy and risk intent into clear technical requirements, working with engineering teams to ensure requirements are practical, implementable and appropriate for the environment. Be clear about where controls are required, where they can be tailored and why. Stay connected to implementation: Work closely with network security engineers to understand how designs are implemented in practice. Be comfortable reviewing configurations in firewall, SASE, WAF and cloud consoles and in code repositories, both to validate design intent and to identify opportunities to strengthen or evolve our architecture. Help define criteria for independent control validation and work with engineering teams to interpret and act on the findings. Guide decisions: Review and approve designs, patterns and exceptions against defined criteria, document architecture decisions, and represent security in architecture review forums. Collaborate across teams: Partner closely with enterprise architecture and with the network security, platform, and cloud engineers that operate security controls. Bring architectural perspective together with their hands-on expertise to develop solutions that are secure, practical and operable at scale. Stay close to implementation and work with engineering teams rather than operating platforms directly. Anticipate threats: Keep up with adversary techniques, attacks on network edge and remote access, and changes in platforms and the industry, and design for where the environment is heading. Communicate and mentor: Explain network security risk and requirements clearly to non-security audiences, and help develop other architects through coaching, design review and feedback Qualifications: 8 or more years of experience in IT or cybersecurity, with significant responsibility for network security architecture, engineering or design. Experience designing resilient, redundant global network architectures, including SD-WAN, MPLS and hybrid connectivity. Experience designing enterprise network security architectures, including NGFWs, segmentation, DMZs, secure ingress and egress, and IDS/IPS. Architecture-level experience with enterprise NGFW platforms, and enough hands-on depth to assess configurations directly. Strong Microsoft Azure network security experience, including virtual networks, network security groups, routing, private connectivity, and cloud ingress and egress. Strong networking fundamentals, including BGP, routing, IPsec, VLAN/VRF, load balancing and troubleshooting complex traffic flows. Experience with infrastructure as code, configuration as code, version control and CI/CD practices for network or security changes. Experience designing zero trust segmentation and SASE/ZTNA architectures. Understanding of the current threat landscape and how it informs network security architecture. Familiarity with data protection and data loss prevention concepts, and with how network controls support them. Familiarity with the risks of enterprise AI use. Experience with AI architectures or enterprise AI deployments is a plus but not required. Experience creating reference architectures, reusable control patterns, exception criteria and decision records that hold up across teams. Sound judgment in making and defending decisions when requirements conflict, and in knowing when to escalate. Clear communication with technical and business audiences, and the ability to build agreement across engineering, platform, risk and product teams. Education Bachelor's degree in computer science, information systems, engineering, cybersecurity, or a related field. A comparable combination of education and relevant experience may be considered. Even if your background doesn't match every requirement, we encourage you to apply. The hiring range for this position is $138,000 - $198,000 a year. The final salary offer will vary based on geographic location, individual education, skills, and experience. The position is eligible to participate in FM's comprehensive Total Rewards program that includes an incentive plan, medical, dental and vision insurance, life and disability insurance, well-being programs, a 401(k) and pension plan, career development opportunities, tuition reimbursement, flexible work, and time off, including vacation and sick time. FM is an Equal Opportunity Employer and is committed to attracting, developing, and retaining a diverse workforce.
Description: CarShield is seeking an experienced Network Engineer to join its growing Infrastructure team. In this role, you will design, implement, monitor, and manage the organization's local and wide area networks, helping maintain secure, reliable connectivity and maximum availability for users across the business. In this role, you will: Design and implement new network solutions and improve the efficiency, security, and reliability of existing networks. Install, configure, and support network infrastructure, including routers, proxy servers, switches, WAN accelerators, DNS, and DHCP. Configure firewalls, routing, and switching to maximize network performance and security. Administer web application firewalls and manage SSL/TLS certificates, including issuance, installation, and renewal. Monitor network performance, investigate faults, and identify opportunities to improve availability and efficiency. Troubleshoot LAN/WAN, VPN, routing, switching, and firewall issues from end to end and implement durable resolutions. Maintain network equipment by applying current, approved firmware releases. Document network configurations, incidents, troubleshooting activities, and resolutions within the IT service management environment. Communicate network status, risks, and relevant updates to key stakeholders. Perform other duties as assigned. Compensation and Benefits Salary commensurate with experience. Group insurance, including medical, dental, vision, and life coverage. 401(k) with employer match. Discounted CarShield policies. Discounted tuition at Lindenwood University. Professional development opportunities. On-site basketball and other recreation. On-site fitness facilities and classes led by a staff personal trainer at the St. Peters headquarters. Requirements: Ability to work fully on-site at CarShield's St. Peters, Missouri, office five days per week. Bachelor's degree in Information Systems or a related field, or equivalent practical experience. At least four years of networking experience and two years of cloud engineering experience. Strong understanding of switches, routers, firewalls, and VPN appliances, including technologies such as Cisco ASA/Firepower, Nexus, Catalyst, and Check Point. Strong working knowledge of TCP/IP, subnetting, IPsec, network segmentation, VRFs, switching, VLANs, routing, and load balancers. Strong understanding of identity management, federated identity systems such as Microsoft ADFS, multifactor authentication, and Active Directory integration with cloud applications and Azure AD. Current knowledge of DevOps practices, containerization, security, and observability. Scripting experience supporting automation and infrastructure-as-code deployments using Terraform, Azure Resource Manager, Azure PowerShell, and Azure CLI. Knowledge of SNMP monitoring and device management, including SNMP v2c and v3, community strings, traps and polling, and MIBs/OIDs. Experience working in an IT service management environment with strong technical documentation practices. Demonstrated ability to troubleshoot complex operational issues efficiently and drive them to resolution. Ability to work independently, exercise sound judgment, and collaborate effectively with direction when needed. Strong written, verbal, and presentation skills, including the ability to explain complex technical concepts to varied audiences. PI8cbf0a40c3ff-4343
11/07/2026
Full time
Description: CarShield is seeking an experienced Network Engineer to join its growing Infrastructure team. In this role, you will design, implement, monitor, and manage the organization's local and wide area networks, helping maintain secure, reliable connectivity and maximum availability for users across the business. In this role, you will: Design and implement new network solutions and improve the efficiency, security, and reliability of existing networks. Install, configure, and support network infrastructure, including routers, proxy servers, switches, WAN accelerators, DNS, and DHCP. Configure firewalls, routing, and switching to maximize network performance and security. Administer web application firewalls and manage SSL/TLS certificates, including issuance, installation, and renewal. Monitor network performance, investigate faults, and identify opportunities to improve availability and efficiency. Troubleshoot LAN/WAN, VPN, routing, switching, and firewall issues from end to end and implement durable resolutions. Maintain network equipment by applying current, approved firmware releases. Document network configurations, incidents, troubleshooting activities, and resolutions within the IT service management environment. Communicate network status, risks, and relevant updates to key stakeholders. Perform other duties as assigned. Compensation and Benefits Salary commensurate with experience. Group insurance, including medical, dental, vision, and life coverage. 401(k) with employer match. Discounted CarShield policies. Discounted tuition at Lindenwood University. Professional development opportunities. On-site basketball and other recreation. On-site fitness facilities and classes led by a staff personal trainer at the St. Peters headquarters. Requirements: Ability to work fully on-site at CarShield's St. Peters, Missouri, office five days per week. Bachelor's degree in Information Systems or a related field, or equivalent practical experience. At least four years of networking experience and two years of cloud engineering experience. Strong understanding of switches, routers, firewalls, and VPN appliances, including technologies such as Cisco ASA/Firepower, Nexus, Catalyst, and Check Point. Strong working knowledge of TCP/IP, subnetting, IPsec, network segmentation, VRFs, switching, VLANs, routing, and load balancers. Strong understanding of identity management, federated identity systems such as Microsoft ADFS, multifactor authentication, and Active Directory integration with cloud applications and Azure AD. Current knowledge of DevOps practices, containerization, security, and observability. Scripting experience supporting automation and infrastructure-as-code deployments using Terraform, Azure Resource Manager, Azure PowerShell, and Azure CLI. Knowledge of SNMP monitoring and device management, including SNMP v2c and v3, community strings, traps and polling, and MIBs/OIDs. Experience working in an IT service management environment with strong technical documentation practices. Demonstrated ability to troubleshoot complex operational issues efficiently and drive them to resolution. Ability to work independently, exercise sound judgment, and collaborate effectively with direction when needed. Strong written, verbal, and presentation skills, including the ability to explain complex technical concepts to varied audiences. PI8cbf0a40c3ff-4343
Cobalt Benefits Group LLC
Manchester, New Hampshire
Description: Cobalt Benefits Group is seeking an Information Security Analyst to help safeguard information assets and technology services across cloud and on-premises environments. The analyst will monitor security controls, investigate alerts, coordinate remediation, and improve the organization's ability to prevent, detect, and respond to cybersecurity risk. The successful candidate will bring practical experience across multiple security domains rather than expertise in a single vendor platform. The role works closely with IT Operations, infrastructure, and application teams in a regulated environment. Security Operations & Incident Response Monitor managed detection and response, endpoint, identity, email, network, cloud, and security analytics platforms for suspicious activity. Triage and investigate alerts; document findings; coordinate containment, remediation, recovery, and post-incident follow-up. Analyze event, identity, endpoint, cloud, application, and network logs to distinguish security incidents from expected activity and false positives. Maintain incident response plans, investigation procedures, escalation paths and case documentation. Cloud, Identity & Secure Access Assess and improve security across public cloud subscriptions, storage, workloads, applications, and hybrid connectivity. Administer identity and access controls including multifactor authentication, conditional access, role-based access, privileged access, service identities, access reviews, and joiner-mover-leaver processes. Support Zero Trust and secure access services for private applications. Partner with administrators and engineers to design secure access for cloud data platforms, application hosting, and future AI-enabled services. Data Protection, Human Risk & Insider Risk Operate data security posture management capabilities to discover sensitive data, excessive access, shadow data, orphaned files, and insecure sharing. Administer data loss prevention controls across email, endpoints, collaboration platforms, cloud services, applications, and file repositories. Support data discovery, classification, information protection, retention, encryption, and remediation workflows for regulated and confidential information. Administer security awareness training, phishing simulations, targeted education, completion tracking, and human-risk reporting. Endpoint, Network & Application Security Support endpoint detection and response, device security, mobile device management, application control, browser protection, and workstation security baselines. Coordinate vulnerability and exposure management across endpoints, servers, network devices, databases, applications, and cloud workloads and prioritize remediation through patching. Assess application and infrastructure changes for secure configuration, logging, access, data protection, and resilience requirements. Monitor security systems, including firewalls, intrusion detection systems, to detect and respond to security incidents in a timely manner. Collaborate on operating system, application, firmware, and security patching; validate remediation and document accepted exceptions. Resilience, Governance & Continuous Improvement Support backup, recovery, immutable storage, business continuity, and disaster recovery security requirements. Maintain policies, standards, procedures, diagrams, and inventories. Contribute to automation and repeatable analysis using scripting, query languages, and workflow integrations. Evaluate emerging security requirements for cloud, software-as-a-service, and AI Agents. Partner with business and technology stakeholders to establish AI governance, security controls, and risk management practices that enable the responsible use of generative AI, AI agents, automation, and machine-to-machine services. Contribute to the organization's AI Risk Management Framework (AI RMF) program by supporting AI inventory management, risk assessments, control validations, policy development, monitoring activities, and ongoing governance reviews. Requirements: Job Requirements Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience. Three to five years of experience in security operations, cloud security, infrastructure security, or a comparable role. Hands-on experience investigating alerts and working across endpoint, identity, email, network, cloud, and data security controls. Experience with vulnerability assessment, remediation tracking, patch management, incident response, and security control validation. Understanding of data discovery, classification, data loss prevention, sensitive-information handling, and insider-risk concepts. Ability to explain technical findings, business impact, and recommended actions to both technical and non-technical audiences. Strong judgment, discretion, documentation, analytical thinking, and the ability to manage multiple priorities. Preferred Qualifications Experience in a regulated environment and familiarity with security or compliance frameworks such as NIST, MITRE ATT&CK, SOC 2, or HITRUST. Experience securing hybrid environments with cloud infrastructure, productivity platforms, on-premises systems, virtualized infrastructure, and software-as-a-service applications. Working knowledge of cloud security, identity governance, and hybrid infrastructure. Familiarity with security information and event management, extended detection and response, cloud security posture management, web application protection, and security orchestration. Experience with scripting or security analytics using PowerShell, query languages, or comparable automation methods. Relevant industry or cloud security certifications Equal Opportunity Employer, including disability/protected veterans Compensation details: 00 Yearly Salary PIa2265b041df4-1463
10/01/2026
Full time
Description: Cobalt Benefits Group is seeking an Information Security Analyst to help safeguard information assets and technology services across cloud and on-premises environments. The analyst will monitor security controls, investigate alerts, coordinate remediation, and improve the organization's ability to prevent, detect, and respond to cybersecurity risk. The successful candidate will bring practical experience across multiple security domains rather than expertise in a single vendor platform. The role works closely with IT Operations, infrastructure, and application teams in a regulated environment. Security Operations & Incident Response Monitor managed detection and response, endpoint, identity, email, network, cloud, and security analytics platforms for suspicious activity. Triage and investigate alerts; document findings; coordinate containment, remediation, recovery, and post-incident follow-up. Analyze event, identity, endpoint, cloud, application, and network logs to distinguish security incidents from expected activity and false positives. Maintain incident response plans, investigation procedures, escalation paths and case documentation. Cloud, Identity & Secure Access Assess and improve security across public cloud subscriptions, storage, workloads, applications, and hybrid connectivity. Administer identity and access controls including multifactor authentication, conditional access, role-based access, privileged access, service identities, access reviews, and joiner-mover-leaver processes. Support Zero Trust and secure access services for private applications. Partner with administrators and engineers to design secure access for cloud data platforms, application hosting, and future AI-enabled services. Data Protection, Human Risk & Insider Risk Operate data security posture management capabilities to discover sensitive data, excessive access, shadow data, orphaned files, and insecure sharing. Administer data loss prevention controls across email, endpoints, collaboration platforms, cloud services, applications, and file repositories. Support data discovery, classification, information protection, retention, encryption, and remediation workflows for regulated and confidential information. Administer security awareness training, phishing simulations, targeted education, completion tracking, and human-risk reporting. Endpoint, Network & Application Security Support endpoint detection and response, device security, mobile device management, application control, browser protection, and workstation security baselines. Coordinate vulnerability and exposure management across endpoints, servers, network devices, databases, applications, and cloud workloads and prioritize remediation through patching. Assess application and infrastructure changes for secure configuration, logging, access, data protection, and resilience requirements. Monitor security systems, including firewalls, intrusion detection systems, to detect and respond to security incidents in a timely manner. Collaborate on operating system, application, firmware, and security patching; validate remediation and document accepted exceptions. Resilience, Governance & Continuous Improvement Support backup, recovery, immutable storage, business continuity, and disaster recovery security requirements. Maintain policies, standards, procedures, diagrams, and inventories. Contribute to automation and repeatable analysis using scripting, query languages, and workflow integrations. Evaluate emerging security requirements for cloud, software-as-a-service, and AI Agents. Partner with business and technology stakeholders to establish AI governance, security controls, and risk management practices that enable the responsible use of generative AI, AI agents, automation, and machine-to-machine services. Contribute to the organization's AI Risk Management Framework (AI RMF) program by supporting AI inventory management, risk assessments, control validations, policy development, monitoring activities, and ongoing governance reviews. Requirements: Job Requirements Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience. Three to five years of experience in security operations, cloud security, infrastructure security, or a comparable role. Hands-on experience investigating alerts and working across endpoint, identity, email, network, cloud, and data security controls. Experience with vulnerability assessment, remediation tracking, patch management, incident response, and security control validation. Understanding of data discovery, classification, data loss prevention, sensitive-information handling, and insider-risk concepts. Ability to explain technical findings, business impact, and recommended actions to both technical and non-technical audiences. Strong judgment, discretion, documentation, analytical thinking, and the ability to manage multiple priorities. Preferred Qualifications Experience in a regulated environment and familiarity with security or compliance frameworks such as NIST, MITRE ATT&CK, SOC 2, or HITRUST. Experience securing hybrid environments with cloud infrastructure, productivity platforms, on-premises systems, virtualized infrastructure, and software-as-a-service applications. Working knowledge of cloud security, identity governance, and hybrid infrastructure. Familiarity with security information and event management, extended detection and response, cloud security posture management, web application protection, and security orchestration. Experience with scripting or security analytics using PowerShell, query languages, or comparable automation methods. Relevant industry or cloud security certifications Equal Opportunity Employer, including disability/protected veterans Compensation details: 00 Yearly Salary PIa2265b041df4-1463
Job Description Job Description 4. Scope of Servies The Florida Department of Transportation, Office of Information Technology (OIT) - Integration Services is in search of a Senior Network Engineer to play a key role in assisting the Office of Information Technology in the establishment of new integration methods and standards, along with implementing system integrations, according to those established methods and standards. Duties and Responsibilities will include but are not limited to: 1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Checkpoint and Global Protect VPNs. 2. Firewall deployments, rule migrations, firewall administration and converting existing rule based policies onto new platforms. 3. Works with critical core network infrastructure devices like Next Gen Firewall, VPNs, log collectors and monitors which play a crucial role in security for our IT environment. 4. Works with cloud network infrastructure to configure firewall, security policies and monitor network traffic. 5. Develop and maintain documentation following NIST guidelines. 6. Project Manager; 7. Data Administration; 5 Education Bachelor's Degree in Computer Science, Information Systems or other related field. Or equivalent work experience. Preferred Certifications (PCNSE, CISSP, CCNP, CCIE) 6. Experience 1. Typically have 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration 2. Three to five years of experience with information security tools based on NIST standards. 3. Requires knowledge of security issues, techniques, and implications across all existing computer platforms. Preference given for experience with NGFW Palo Alto or Checkpoint security products. 4. Experience using schematic diagramming tools to map infrastructure layouts. 7 Primary Job Duties/ Tasks Senior Network Engineer - Job Duties 1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and Web-based services. Designs and maintains secure network architectures, segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other security controls. 2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation. Ensures security practices align with organizational requirements, industry standards, and applicable regulatory requirements. 3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments. Prepares executive-level status reports, risk assessments, security metrics, and recommendations addressing vulnerabilities, emerging threats, security incidents, and operational risks. 4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations. Administers and monitors security profiles and access controls, reviews security alerts and violation reports, investigates security exceptions, and coordinates remediation activities. Maintains comprehensive documentation of security controls, configurations, incidents, and corrective actions. 5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency. Leads technical evaluations, proof-of-concept activities, product assessments, and implementation recommendations for enterprise networking and cybersecurity solutions. 6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues. Troubleshoots escalated network and security incidents, provides technical guidance to infrastructure teams, and educates IT and business personnel on security policies, secure configurations, access requirements, and risk mitigation practices. 7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support. Reviews project designs and proposed solutions to identify security risks and ensures appropriate security controls are incorporated into network, cloud, application, and infrastructure initiatives. 8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure. Develops network solutions that support high availability, resiliency, scalability, and security requirements. 9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions. Coordinates with vendors, technical teams, and organizational stakeholders during critical incidents and service disruptions. 10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries between users, applications, devices, and infrastructure. Evaluates east-west and north-south traffic flows to identify security risks and opportunities for improved network controls. 11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks. Develops dashboards, key performance indicators, and management reports to support data-driven infrastructure and security decisions. 12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements. Ensures documentation remains accurate and aligned with the current enterprise environment. 13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions. Serves as a senior technical resource and provides guidance on enterprise networking, security architecture, infrastructure design, and technology modernization. 14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities in enterprise networking, cybersecurity, cloud infrastructure, and emerging technologies. Senior-Level Requirements Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving the most complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership. The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls. 8 Job Specific Skills and Abilities (KSAs): Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff. 9 General Knowledge Skills and Abilities (KSAs): The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas: 1. Communication: Have the ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings (i.e.; project team meetings, management presentations, etc.). Must have the ability to effectively listen and process information provided by others. 2. Customer Service: Works well with clients and customers (i.e.; business office, public, or other agencies). Able to assess the needs of the customer, provide information or assistance to satisfy expectations or resolve a problem. 3. Decision Making: Makes sound, well-informed, and objective decisions. 4. Flexibility: Is open to change, new processes (or process improvement), and new information. Has the ability to adapt in response to new information, changing conditions . click apply for full job details
09/30/2026
Full time
Job Description Job Description 4. Scope of Servies The Florida Department of Transportation, Office of Information Technology (OIT) - Integration Services is in search of a Senior Network Engineer to play a key role in assisting the Office of Information Technology in the establishment of new integration methods and standards, along with implementing system integrations, according to those established methods and standards. Duties and Responsibilities will include but are not limited to: 1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Checkpoint and Global Protect VPNs. 2. Firewall deployments, rule migrations, firewall administration and converting existing rule based policies onto new platforms. 3. Works with critical core network infrastructure devices like Next Gen Firewall, VPNs, log collectors and monitors which play a crucial role in security for our IT environment. 4. Works with cloud network infrastructure to configure firewall, security policies and monitor network traffic. 5. Develop and maintain documentation following NIST guidelines. 6. Project Manager; 7. Data Administration; 5 Education Bachelor's Degree in Computer Science, Information Systems or other related field. Or equivalent work experience. Preferred Certifications (PCNSE, CISSP, CCNP, CCIE) 6. Experience 1. Typically have 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration 2. Three to five years of experience with information security tools based on NIST standards. 3. Requires knowledge of security issues, techniques, and implications across all existing computer platforms. Preference given for experience with NGFW Palo Alto or Checkpoint security products. 4. Experience using schematic diagramming tools to map infrastructure layouts. 7 Primary Job Duties/ Tasks Senior Network Engineer - Job Duties 1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and Web-based services. Designs and maintains secure network architectures, segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other security controls. 2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation. Ensures security practices align with organizational requirements, industry standards, and applicable regulatory requirements. 3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments. Prepares executive-level status reports, risk assessments, security metrics, and recommendations addressing vulnerabilities, emerging threats, security incidents, and operational risks. 4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations. Administers and monitors security profiles and access controls, reviews security alerts and violation reports, investigates security exceptions, and coordinates remediation activities. Maintains comprehensive documentation of security controls, configurations, incidents, and corrective actions. 5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency. Leads technical evaluations, proof-of-concept activities, product assessments, and implementation recommendations for enterprise networking and cybersecurity solutions. 6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues. Troubleshoots escalated network and security incidents, provides technical guidance to infrastructure teams, and educates IT and business personnel on security policies, secure configurations, access requirements, and risk mitigation practices. 7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support. Reviews project designs and proposed solutions to identify security risks and ensures appropriate security controls are incorporated into network, cloud, application, and infrastructure initiatives. 8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure. Develops network solutions that support high availability, resiliency, scalability, and security requirements. 9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions. Coordinates with vendors, technical teams, and organizational stakeholders during critical incidents and service disruptions. 10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries between users, applications, devices, and infrastructure. Evaluates east-west and north-south traffic flows to identify security risks and opportunities for improved network controls. 11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks. Develops dashboards, key performance indicators, and management reports to support data-driven infrastructure and security decisions. 12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements. Ensures documentation remains accurate and aligned with the current enterprise environment. 13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions. Serves as a senior technical resource and provides guidance on enterprise networking, security architecture, infrastructure design, and technology modernization. 14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities in enterprise networking, cybersecurity, cloud infrastructure, and emerging technologies. Senior-Level Requirements Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving the most complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership. The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls. 8 Job Specific Skills and Abilities (KSAs): Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff. 9 General Knowledge Skills and Abilities (KSAs): The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas: 1. Communication: Have the ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings (i.e.; project team meetings, management presentations, etc.). Must have the ability to effectively listen and process information provided by others. 2. Customer Service: Works well with clients and customers (i.e.; business office, public, or other agencies). Able to assess the needs of the customer, provide information or assistance to satisfy expectations or resolve a problem. 3. Decision Making: Makes sound, well-informed, and objective decisions. 4. Flexibility: Is open to change, new processes (or process improvement), and new information. Has the ability to adapt in response to new information, changing conditions . click apply for full job details
Job Description Job Description Network Security Engineer II Location - Onsite, Irvine, CA Grade: 8 Company Overview Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group. At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations. If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation. What You Will Be Doing The Security Architecture and Engineering team within the CISO organization is seeking a Network Security Engineer II to help design, implement, operate, and continuously improve enterprise network security controls. This role will focus on technologies including Web Application Firewalls, Network Access Control, IDS, and IPS, while partnering closely with the IT Networking team to ensure secure, reliable, and scalable network services. This is an onsite role, five days per week, based in our Irvine office. The key responsibilities of this role are as described below: The Network Security Engineer II will be responsible for supporting and maintaining critical network security platforms across the enterprise. Responsibilities include: Administer, monitor, and optimize Web Application Firewall platforms to protect internet-facing and internal applications. Support and maintain Network Access Control technologies, including device profiling, policy enforcement, segmentation support, and exception handling. Operate and tune Intrusion Detection and Intrusion Prevention Systems to improve detection accuracy and reduce false positives. Partner with the IT Networking team on secure network design, routing, switching, firewall, segmentation, and connectivity initiatives. Assist other Security and IT teams by reviewing security events, alerts, logs, and traffic patterns to identify potential threats or misconfigurations. Assist with the implementation of network security architecture standards, hardening guidelines, and secure configuration baselines. Participate in incident response activities related to network-based threats, unauthorized access, or suspicious traffic. Develop and maintain documentation, including network security diagrams, platform runbooks, standard operating procedures, and change records. Support vulnerability remediation efforts related to network infrastructure, application exposure, and security control gaps. Perform policy reviews and rulebase hygiene for WAF, NAC, IDS, and IPS technologies. Participate in change management activities, including risk assessment, implementation planning, testing, and post-change validation. Collaborate with security operations, infrastructure, application, and compliance teams to support business and regulatory requirements. Assist with lifecycle management for network security tools, including upgrades, patching, certificate management, integrations, and capacity planning. Provide technical recommendations to improve visibility, segmentation, access control, and threat prevention across the environment. Basic Qualifications: Experience: 8+ years of network security, infrastructure security, and/or security engineering. Practical and demonstrated experience working Web Application Firewalls, Network Access Control platforms, IDS/IPS technologies, Firewalls or secure network gateways in platforms by Cisco, Palo Alto, Trend Micro, Gigamon, Trellix, etc. Education: Bachelor's degree in Cybersecurity, Information Technology, Computer science or a related field. Technical Expertise: Advanced level knowledge of networking concepts, including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, VPNs, and network segmentation. Experience analyzing logs, packet captures, alerts, and network traffic to troubleshoot issues or investigate security events. Familiarity with common network and application-layer attack techniques. Experience supporting production environments and following change management processes. Strong troubleshooting, documentation, and communication skills. Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination. Schedule: This is an onsite position requiring presence in the Irvine office five days per week. Some after-hours or weekend work may be required for planned maintenance, incident response, or critical security changes. Preferred Qualifications: Experience: Experience with enterprise WAF policy tuning, bot protection, API protection, or application security rule sets. Experience with NAC deployment models, including 802.1X, MAC authentication bypass, posture assessment, guest access, and device profiling. Familiarity with SIEM, SOAR, vulnerability management, endpoint security, or cloud security tools. Scripting or automation experience using Python, PowerShell, APIs, or infrastructure-as-code tools. Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as Security+, Network+, CCNA, CCNP Security, PCNSE, CISSP, GSEC, GCIH, or vendor-specific certifications. Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication. Team Culture: The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed. Base Salary Range: $100,000 - 130,000 Powered by JazzHR FgOdYKZ9EK
09/28/2026
Full time
Job Description Job Description Network Security Engineer II Location - Onsite, Irvine, CA Grade: 8 Company Overview Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group. At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations. If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation. What You Will Be Doing The Security Architecture and Engineering team within the CISO organization is seeking a Network Security Engineer II to help design, implement, operate, and continuously improve enterprise network security controls. This role will focus on technologies including Web Application Firewalls, Network Access Control, IDS, and IPS, while partnering closely with the IT Networking team to ensure secure, reliable, and scalable network services. This is an onsite role, five days per week, based in our Irvine office. The key responsibilities of this role are as described below: The Network Security Engineer II will be responsible for supporting and maintaining critical network security platforms across the enterprise. Responsibilities include: Administer, monitor, and optimize Web Application Firewall platforms to protect internet-facing and internal applications. Support and maintain Network Access Control technologies, including device profiling, policy enforcement, segmentation support, and exception handling. Operate and tune Intrusion Detection and Intrusion Prevention Systems to improve detection accuracy and reduce false positives. Partner with the IT Networking team on secure network design, routing, switching, firewall, segmentation, and connectivity initiatives. Assist other Security and IT teams by reviewing security events, alerts, logs, and traffic patterns to identify potential threats or misconfigurations. Assist with the implementation of network security architecture standards, hardening guidelines, and secure configuration baselines. Participate in incident response activities related to network-based threats, unauthorized access, or suspicious traffic. Develop and maintain documentation, including network security diagrams, platform runbooks, standard operating procedures, and change records. Support vulnerability remediation efforts related to network infrastructure, application exposure, and security control gaps. Perform policy reviews and rulebase hygiene for WAF, NAC, IDS, and IPS technologies. Participate in change management activities, including risk assessment, implementation planning, testing, and post-change validation. Collaborate with security operations, infrastructure, application, and compliance teams to support business and regulatory requirements. Assist with lifecycle management for network security tools, including upgrades, patching, certificate management, integrations, and capacity planning. Provide technical recommendations to improve visibility, segmentation, access control, and threat prevention across the environment. Basic Qualifications: Experience: 8+ years of network security, infrastructure security, and/or security engineering. Practical and demonstrated experience working Web Application Firewalls, Network Access Control platforms, IDS/IPS technologies, Firewalls or secure network gateways in platforms by Cisco, Palo Alto, Trend Micro, Gigamon, Trellix, etc. Education: Bachelor's degree in Cybersecurity, Information Technology, Computer science or a related field. Technical Expertise: Advanced level knowledge of networking concepts, including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, VPNs, and network segmentation. Experience analyzing logs, packet captures, alerts, and network traffic to troubleshoot issues or investigate security events. Familiarity with common network and application-layer attack techniques. Experience supporting production environments and following change management processes. Strong troubleshooting, documentation, and communication skills. Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination. Schedule: This is an onsite position requiring presence in the Irvine office five days per week. Some after-hours or weekend work may be required for planned maintenance, incident response, or critical security changes. Preferred Qualifications: Experience: Experience with enterprise WAF policy tuning, bot protection, API protection, or application security rule sets. Experience with NAC deployment models, including 802.1X, MAC authentication bypass, posture assessment, guest access, and device profiling. Familiarity with SIEM, SOAR, vulnerability management, endpoint security, or cloud security tools. Scripting or automation experience using Python, PowerShell, APIs, or infrastructure-as-code tools. Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as Security+, Network+, CCNA, CCNP Security, PCNSE, CISSP, GSEC, GCIH, or vendor-specific certifications. Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication. Team Culture: The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed. Base Salary Range: $100,000 - 130,000 Powered by JazzHR FgOdYKZ9EK
Job Description Job Description Description: Associate Network Security Engineer Cary, NC • Hybrid Our client is seeking an Associate Cybersecurity Engineer for a 12 month contract, with potential for permanent conversion, to support the Information Security organization. This role focuses on monitoring network security activities and operating and optimizing security infrastructure. The engineer will drive policy, rule, and architecture improvements to prevent and remediate incidents, perform security configuration changes, and collaborate with IT and business stakeholders on triage. The position emphasizes enterprise firewalls, SASE and ZTNA, identity and access management, Microsoft security tooling, and process development aligned to best practices and regulatory requirements. Rate : $42.00 - $48.00 per hour W2 Responsibilities: Monitor network security activities and maintain oversight of security infrastructure. Implement, monitor, and manage enterprise firewall solutions, including NGFW, to enforce network security policies. Operate and configure SASE capabilities including secure web gateways, ZTNA, and CASB. Execute security configuration changes and support incident prevention and remediation through policy, rule, and architecture optimization. Collaborate with IT and business stakeholders on security triage and operational support. Leverage Microsoft Security Suite such as Defender for Endpoint, Sentinel, and Entra/Azure AD across on premises and cloud environments. Develop and refine procedures, policies, and processes aligned with best practices and regulatory requirements. Recommend remediation measures to improve security posture and reduce risk. Communicate security concepts to cross functional teams and stakeholders. Perform other related duties as assigned. Experience Requirements: 3+ years in cloud or network security engineering, security operations, insider risk management, or security event management. Hands on experience with identity, firewall, cloud, and SIEM tools such as Microsoft Azure, Okta, Duo, Palo Alto, Fortinet, Zscaler, Windows Defender, OCI, and Sentinel. Ability to convey complex information risk and security issues in an actionable manner. Demonstrated judgment, urgency, ethical standards, regulatory awareness, customer service, and business integrity. Preferred proficiency with automation or scripting such as Ansible, Python, KQL, or PowerShell. Strong written and oral communication skills and the ability to work cross functionally with network, cloud, infrastructure, and application teams. Strong organizational skills with the ability to prioritize and deliver in a fast paced environment. Ability to accommodate approximately 5% travel. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve. Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and Affirmative Action Employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, color, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws. Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!
09/28/2026
Full time
Job Description Job Description Description: Associate Network Security Engineer Cary, NC • Hybrid Our client is seeking an Associate Cybersecurity Engineer for a 12 month contract, with potential for permanent conversion, to support the Information Security organization. This role focuses on monitoring network security activities and operating and optimizing security infrastructure. The engineer will drive policy, rule, and architecture improvements to prevent and remediate incidents, perform security configuration changes, and collaborate with IT and business stakeholders on triage. The position emphasizes enterprise firewalls, SASE and ZTNA, identity and access management, Microsoft security tooling, and process development aligned to best practices and regulatory requirements. Rate : $42.00 - $48.00 per hour W2 Responsibilities: Monitor network security activities and maintain oversight of security infrastructure. Implement, monitor, and manage enterprise firewall solutions, including NGFW, to enforce network security policies. Operate and configure SASE capabilities including secure web gateways, ZTNA, and CASB. Execute security configuration changes and support incident prevention and remediation through policy, rule, and architecture optimization. Collaborate with IT and business stakeholders on security triage and operational support. Leverage Microsoft Security Suite such as Defender for Endpoint, Sentinel, and Entra/Azure AD across on premises and cloud environments. Develop and refine procedures, policies, and processes aligned with best practices and regulatory requirements. Recommend remediation measures to improve security posture and reduce risk. Communicate security concepts to cross functional teams and stakeholders. Perform other related duties as assigned. Experience Requirements: 3+ years in cloud or network security engineering, security operations, insider risk management, or security event management. Hands on experience with identity, firewall, cloud, and SIEM tools such as Microsoft Azure, Okta, Duo, Palo Alto, Fortinet, Zscaler, Windows Defender, OCI, and Sentinel. Ability to convey complex information risk and security issues in an actionable manner. Demonstrated judgment, urgency, ethical standards, regulatory awareness, customer service, and business integrity. Preferred proficiency with automation or scripting such as Ansible, Python, KQL, or PowerShell. Strong written and oral communication skills and the ability to work cross functionally with network, cloud, infrastructure, and application teams. Strong organizational skills with the ability to prioritize and deliver in a fast paced environment. Ability to accommodate approximately 5% travel. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve. Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and Affirmative Action Employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, color, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws. Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!
Georgia System Operations Corporation
Tucker, Georgia
Job Description Job Description Network Security EngineerEngineer Secure, Resilient Network Services That Support Mission-Critical OperationsGeorgia System Operations Corporation (GSOC) is seeking a Network Security Engineer to design, implement, secure, and operate corporate network services and cybersecurity tools that enable reliable, protected business operations.This hands-on role combines enterprise network engineering and cybersecurity expertise across datacenter, campus, remote-site, internet-edge, and approved cloud environments. The Network Security Engineer helps safeguard availability, performance, secure access, and security visibility while advancing resilient, supportable, and automated network and security services.This opportunity is ideal for an experienced network and security professional who enjoys solving complex technical problems, strengthening controls, supporting incident response, mentoring peers, and collaborating across infrastructure, cybersecurity, application, service desk, and vendor teams. This is an onsite position and it is not eligible for visa sponsorshipWhat You'll DoAs a Network Security Engineer, you will engineer and support the network and network-focused security services that connect and protect enterprise users, systems, and sites.You will:Design, deploy, and support datacenter and campus switching, routing, VLANs, VRFs, high availability, capacity planning, and network segmentation.Administer next-generation firewalls, security zones, NAT, threat-prevention services, firewall policy lifecycle, and least-privilege access controls.Engineer WAN, internet-edge, remote-site, remote-access VPN, and site-to-site VPN connectivity, including integrations with identity, MFA, and device-trust services.Design and support corporate and guest wireless, controllers, access points, RF performance, 802.1X, network access control, device profiling, and secure authentication.Configure load balancers, virtual servers, pools, health monitors, persistence, TLS termination, and high-availability services.Manage the network-facing certificate lifecycle and PKI integrations.Engineer and operate secure web and DNS controls, network detection and response, security logging, SIEM integrations, and security-control health monitoring.Partner with the Security Operations Center on alert tuning, investigations, evidence gathering, and operational security use cases.Support secure DNS, DHCP, and IP address management and maintain telemetry, flow data, logging, alerting, packet analysis, and service dashboards.Maintain secure configuration baselines, backups, firmware and software lifecycle, and remediation of network-device and security-tool vulnerabilities.Automate repeatable work using APIs, scripting, and infrastructure-as-code practices.Develop and test network and security-platform recovery and failover capabilities.Prepare change and rollback plans and provide incident escalation, containment support, root-cause analysis, and vendor coordination. This role also:Works independently within established standards and change processes.Provides technical leadership for projects and mentors peers.Participates in technology evaluations, proof-of-concepts, cross-functional initiatives, backup support, and knowledge transfer. What You BringBachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.Ideally 5+ years of progressive experience supporting enterprise network and network-security infrastructure, including switching, routing, firewall administration, VPN, wireless, and troubleshooting.Strong knowledge of enterprise LAN/WAN, datacenter switching, routing, firewalls, VPN, wireless, NAC, load balancing, PKI and certificates, DNS, DHCP, IPAM, and secure configuration management.Hands-on experience operating cybersecurity tooling such as secure web and DNS services, network detection and response, vulnerability management, SIEM and logging integrations, and security monitoring.Experience with network and security automation using Python, PowerShell, Ansible, Terraform, APIs, or comparable tools.Working knowledge of NIST CSF, CIS Controls, incident-response practices, and applicable regulatory or industry requirements, including NERC CIP where relevant to the IT environment.Strong analytical, troubleshooting, documentation, communication, collaboration, and customer-service skills. Preferred QualificationsEnterprise Network EngineeringExperience engineering highly available datacenter, campus, WAN, internet-edge, remote-site, wireless, and VPN services.Experience with segmentation, least-privilege access, identity and MFA integrations, device trust, and network access control.Experience with load balancing, TLS termination, application delivery, certificate lifecycle management, and PKI integrations.Network Security & DetectionExperience operating next-generation firewalls, threat-prevention services, secure web or DNS controls, network detection and response, and vulnerability-management processes.Experience integrating network-security telemetry with SIEM, logging, alerting, dashboards, and incident-response workflows.Experience partnering with a SOC on investigation, tuning, containment, evidence, or root-cause activities.Automation, Resilience & OperationsExperience automating network or security operations through scripting, APIs, Ansible, Terraform, or infrastructure as code.Experience developing recovery, failover, configuration-backup, firmware-lifecycle, and vulnerability-remediation practices.Experience preparing changes, rollback plans, technical documentation, performance measures, and vendor-supported resolutions.CertificationsRelevant credentials such as CCNA, CCNP, ACP, PCNSE or equivalent firewall-vendor certification, CWNA, Security+, CISSP, AZ-700, or similar certifications are preferred. Advantages of Working at GSOCWorking at GSOC means more than just a job it's an opportunity to contribute to work that truly matters. Mission-Driven ImpactYour work supports secure, reliable corporate network services and cybersecurity capabilities used across GSOC's enterprise environment. Network Engineering & Cybersecurity DepthApply both network engineering and hands-on security expertise across switching, routing, wireless, firewalls, VPN, application delivery, monitoring, automation, and incident support. Technical Leadership & Continuous ImprovementLead technical projects, mentor peers, evaluate new technologies, automate repeatable work, and strengthen resilience, visibility, and operational supportability. Strong Values and Professional StandardsWork in an environment grounded in accountability, collaboration, integrity, security, compliance, and continuous improvement. Work Environment & BenefitsGSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.Participation in an on-call rotation, emergency support, and scheduled maintenance outside normal business hours is required. Why Join GSOCAt GSOC, you will help engineer the network and security services that enable dependable business operations, secure access, security visibility, and resilient enterprise technology.You'll collaborate across infrastructure, cybersecurity, applications, service desk, and vendor teams while expanding your technical leadership and automation capabilities. Apply TodayIf you're ready to combine enterprise network engineering and cybersecurity expertise in a hands-on role supporting reliable, protected operations, we encourage you to apply. GSOC does not accept unsolicited resumes or candidate submissions from staffing agencies, search firms, or third-party recruiters. Any unsolicited resumes submitted without a valid, executed agreement will become the property of GSOC, and no placement fee will be paid. Job Posted by ApplicantPro
09/28/2026
Full time
Job Description Job Description Network Security EngineerEngineer Secure, Resilient Network Services That Support Mission-Critical OperationsGeorgia System Operations Corporation (GSOC) is seeking a Network Security Engineer to design, implement, secure, and operate corporate network services and cybersecurity tools that enable reliable, protected business operations.This hands-on role combines enterprise network engineering and cybersecurity expertise across datacenter, campus, remote-site, internet-edge, and approved cloud environments. The Network Security Engineer helps safeguard availability, performance, secure access, and security visibility while advancing resilient, supportable, and automated network and security services.This opportunity is ideal for an experienced network and security professional who enjoys solving complex technical problems, strengthening controls, supporting incident response, mentoring peers, and collaborating across infrastructure, cybersecurity, application, service desk, and vendor teams. This is an onsite position and it is not eligible for visa sponsorshipWhat You'll DoAs a Network Security Engineer, you will engineer and support the network and network-focused security services that connect and protect enterprise users, systems, and sites.You will:Design, deploy, and support datacenter and campus switching, routing, VLANs, VRFs, high availability, capacity planning, and network segmentation.Administer next-generation firewalls, security zones, NAT, threat-prevention services, firewall policy lifecycle, and least-privilege access controls.Engineer WAN, internet-edge, remote-site, remote-access VPN, and site-to-site VPN connectivity, including integrations with identity, MFA, and device-trust services.Design and support corporate and guest wireless, controllers, access points, RF performance, 802.1X, network access control, device profiling, and secure authentication.Configure load balancers, virtual servers, pools, health monitors, persistence, TLS termination, and high-availability services.Manage the network-facing certificate lifecycle and PKI integrations.Engineer and operate secure web and DNS controls, network detection and response, security logging, SIEM integrations, and security-control health monitoring.Partner with the Security Operations Center on alert tuning, investigations, evidence gathering, and operational security use cases.Support secure DNS, DHCP, and IP address management and maintain telemetry, flow data, logging, alerting, packet analysis, and service dashboards.Maintain secure configuration baselines, backups, firmware and software lifecycle, and remediation of network-device and security-tool vulnerabilities.Automate repeatable work using APIs, scripting, and infrastructure-as-code practices.Develop and test network and security-platform recovery and failover capabilities.Prepare change and rollback plans and provide incident escalation, containment support, root-cause analysis, and vendor coordination. This role also:Works independently within established standards and change processes.Provides technical leadership for projects and mentors peers.Participates in technology evaluations, proof-of-concepts, cross-functional initiatives, backup support, and knowledge transfer. What You BringBachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.Ideally 5+ years of progressive experience supporting enterprise network and network-security infrastructure, including switching, routing, firewall administration, VPN, wireless, and troubleshooting.Strong knowledge of enterprise LAN/WAN, datacenter switching, routing, firewalls, VPN, wireless, NAC, load balancing, PKI and certificates, DNS, DHCP, IPAM, and secure configuration management.Hands-on experience operating cybersecurity tooling such as secure web and DNS services, network detection and response, vulnerability management, SIEM and logging integrations, and security monitoring.Experience with network and security automation using Python, PowerShell, Ansible, Terraform, APIs, or comparable tools.Working knowledge of NIST CSF, CIS Controls, incident-response practices, and applicable regulatory or industry requirements, including NERC CIP where relevant to the IT environment.Strong analytical, troubleshooting, documentation, communication, collaboration, and customer-service skills. Preferred QualificationsEnterprise Network EngineeringExperience engineering highly available datacenter, campus, WAN, internet-edge, remote-site, wireless, and VPN services.Experience with segmentation, least-privilege access, identity and MFA integrations, device trust, and network access control.Experience with load balancing, TLS termination, application delivery, certificate lifecycle management, and PKI integrations.Network Security & DetectionExperience operating next-generation firewalls, threat-prevention services, secure web or DNS controls, network detection and response, and vulnerability-management processes.Experience integrating network-security telemetry with SIEM, logging, alerting, dashboards, and incident-response workflows.Experience partnering with a SOC on investigation, tuning, containment, evidence, or root-cause activities.Automation, Resilience & OperationsExperience automating network or security operations through scripting, APIs, Ansible, Terraform, or infrastructure as code.Experience developing recovery, failover, configuration-backup, firmware-lifecycle, and vulnerability-remediation practices.Experience preparing changes, rollback plans, technical documentation, performance measures, and vendor-supported resolutions.CertificationsRelevant credentials such as CCNA, CCNP, ACP, PCNSE or equivalent firewall-vendor certification, CWNA, Security+, CISSP, AZ-700, or similar certifications are preferred. Advantages of Working at GSOCWorking at GSOC means more than just a job it's an opportunity to contribute to work that truly matters. Mission-Driven ImpactYour work supports secure, reliable corporate network services and cybersecurity capabilities used across GSOC's enterprise environment. Network Engineering & Cybersecurity DepthApply both network engineering and hands-on security expertise across switching, routing, wireless, firewalls, VPN, application delivery, monitoring, automation, and incident support. Technical Leadership & Continuous ImprovementLead technical projects, mentor peers, evaluate new technologies, automate repeatable work, and strengthen resilience, visibility, and operational supportability. Strong Values and Professional StandardsWork in an environment grounded in accountability, collaboration, integrity, security, compliance, and continuous improvement. Work Environment & BenefitsGSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.Participation in an on-call rotation, emergency support, and scheduled maintenance outside normal business hours is required. Why Join GSOCAt GSOC, you will help engineer the network and security services that enable dependable business operations, secure access, security visibility, and resilient enterprise technology.You'll collaborate across infrastructure, cybersecurity, applications, service desk, and vendor teams while expanding your technical leadership and automation capabilities. Apply TodayIf you're ready to combine enterprise network engineering and cybersecurity expertise in a hands-on role supporting reliable, protected operations, we encourage you to apply. GSOC does not accept unsolicited resumes or candidate submissions from staffing agencies, search firms, or third-party recruiters. Any unsolicited resumes submitted without a valid, executed agreement will become the property of GSOC, and no placement fee will be paid. Job Posted by ApplicantPro
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
09/28/2026
Full time
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
09/28/2026
Full time
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description Job Title: Network Security Engineer Department: Information Technology Location: Rochester, NY Classification: Exempt Reports To: Director of Information Technology Please note: Candidates must be authorized to work in the United States and able to work onsite in the Rochester, NY office. Sponsorship is not available for this position. Company Overview: Woods Oviatt Gilman, LLP is a leading and reputable full-service law firm dedicated to providing exceptional legal services to our clients. With a team of highly skilled and experienced attorneys, we strive to deliver comprehensive and effective solutions to meet the diverse needs of our clients. Our headquarters is in Rochester, NY with additional offices in Albany and Buffalo, NY. We foster a collaborative and inclusive work environment where every team member is valued and respected. We encourage open communication, teamwork, and professional growth. Our firm promotes a healthy work-life balance and supports the well-being of our employees. Position Summary: The Network Security Engineer is a hands-on technical role responsible for implementing, configuring, and maintaining the firm's security controls across a hybrid environment, including FortiGate firewalls, endpoint protection, cloud email and Microsoft 365, Intune-managed devices, and a co-managed monitoring and detection service. The Engineer works under the direction of the Director of Information Technology, who sets security policy and priorities for the department, and provides the technical assessment, recommendations, and documentation that support those decisions. Because the firm safeguards confidential and privileged client information, this position calls for strong technical skill, sound judgment, discretion, and clear communication with both the IT team and firm personnel. Duties and Responsibilities: Network and Perimeter Security Administer, tune, and monitor FortiGate firewalls, including security policies, VPN configuration, intrusion prevention, web and content filtering, and logging Implement and maintain network segmentation, secure remote access, and wireless security across firm locations, in line with the department's standards Maintain secure connectivity for remote and hybrid users, including VPN and conditional access Conduct scheduled reviews of firewall rules and network configurations, recommend changes to the Director of Information Technology, and maintain accurate network security documentation Endpoint, Identity, and Email Security Administer the firm's endpoint protection platforms, including CrowdStrike and Microsoft endpoint protection, covering policy configuration, detection review, containment actions, and agent coverage Configure and maintain device compliance, configuration, and application deployment through Microsoft Intune in a hybrid environment, including full-disk encryption and recovery key handling Configure and maintain identity and access controls across Microsoft Entra ID and on-premises Active Directory, including multifactor authentication, conditional access, and privileged account settings, and perform periodic access reviews Configure and maintain security settings for cloud email and collaboration, including mail flow and filtering rules, phishing and malware defenses, email authentication records, and Microsoft 365 security configuration Perform vulnerability and patch management across servers, endpoints, and network devices, including scanning, prioritizing findings, tracking remediation, and reporting status to the Director of Information Technology Monitoring, Detection, and Incident Response Serve as the day-to-day technical contact for the firm's managed monitoring service, triaging alerts, validating findings, and carrying issues through to resolution Investigate security events and perform containment, eradication, and recovery steps in accordance with the firm's incident response procedures, escalating promptly to the Director of Information Technology Contribute to the development, maintenance, and testing of the firm's incident response plan, including participation in tabletop exercises Verify that backup, recovery, and business continuity controls are functioning and tested, and support the department's disaster recovery planning Security Program Support, Privacy, and Compliance Provide technical evaluation and recommendations to support the department's selection and adoption of a recognized security framework such as the NIST Cybersecurity Framework, CIS Controls, or ISO 27001 Implement and maintain the technical controls that support the framework, and assist in assessing and reporting the firm's posture against it Assist the Director of Information Technology in drafting and maintaining information security policies, standards, and procedures, and implement the technical measures that carry them out Maintain security documentation, control evidence, and a working risk log, and recommend remediation priorities to the Director of Information Technology Support compliance with applicable privacy and data protection obligations, including the New York SHIELD Act and other state privacy requirements, and requirements applicable to regulated client data such as protected health information Prepare technical responses and supporting documentation for client security requirements, including outside counsel guidelines, security questionnaires, and client and third-party audits, and complete remediation items assigned by the Director of Information Technology Support obligations arising from clients in regulated industries, including financial services requirements such as NYDFS Part 500 as applied to the firm through client agreements Perform technical security reviews of vendors, applications, and services under consideration, and provide findings and recommendations to the Director of Information Technology Assist with independent assessments, including penetration testing and external audits, and complete assigned remediation work Awareness and Collaboration Administer the firm's security awareness program, including training delivery, phishing simulations, and user communication developed with the Director of Information Technology Partner with the IT team on secure configuration, change management, and project work, and provide technical guidance to service desk staff on security escalations Report on control status, vulnerabilities, incidents, and open remediation items to the Director of Information Technology Maintain current knowledge of emerging threats, vulnerabilities, and security technologies relevant to the legal industry, and share findings with the department Technical Skills: Required Hands-on administration of FortiGate firewalls, including policy management, VPN, intrusion prevention, and content filtering Endpoint detection and response administration, ideally CrowdStrike Falcon, and familiarity with Microsoft endpoint protection Microsoft 365 security administration, including cloud email protection, mail flow and filtering, phishing defense, and email authentication using SPF, DKIM, and DMARC Identity and access administration across Microsoft Entra ID and on-premises Active Directory in a hybrid configuration, including multifactor authentication and conditional access Microsoft Intune administration, including device compliance and configuration, application deployment, and device encryption in a hybrid environment Solid networking fundamentals, including TCP/IP, routing and switching, VLANs, DNS, DHCP, segmentation, and wireless security Vulnerability management and patch management practice, including scanning, prioritization, and remediation tracking Security monitoring and log analysis, and experience working with a managed detection and response or co-managed SOC provider Working familiarity with a recognized security framework such as the NIST Cybersecurity Framework, CIS Controls, or ISO 27001, and experience implementing controls in support of one Familiarity with privacy and data protection requirements, including state breach notification obligations and handling of regulated data Ability to produce clear technical documentation, control evidence, risk write-ups, and status reporting for both technical and non-technical readers Preferred Prior experience in a law firm or other professional services environment, including familiarity with outside counsel guidelines and client security audits Experience preparing responses to client security questionnaires and third-party risk assessments Azure or other cloud security administration PowerShell or comparable scripting for automation and reporting Experience with data loss prevention, email encryption, or information rights management Experience with security awareness platforms and phishing simulation tools Familiarity with SD-WAN, zero trust, or secure access service edge architectures Relevant certifications such as Fortinet NSE, CompTIA Security+, GIAC credentials, Microsoft SC-200 or SC-300, CISSP, or CISM Qualifications and Competencies: Strong analytical and problem-solving skills, with sound technical judgment in assessing and prioritizing risk . click apply for full job details
09/28/2026
Full time
Job Description Job Description Job Title: Network Security Engineer Department: Information Technology Location: Rochester, NY Classification: Exempt Reports To: Director of Information Technology Please note: Candidates must be authorized to work in the United States and able to work onsite in the Rochester, NY office. Sponsorship is not available for this position. Company Overview: Woods Oviatt Gilman, LLP is a leading and reputable full-service law firm dedicated to providing exceptional legal services to our clients. With a team of highly skilled and experienced attorneys, we strive to deliver comprehensive and effective solutions to meet the diverse needs of our clients. Our headquarters is in Rochester, NY with additional offices in Albany and Buffalo, NY. We foster a collaborative and inclusive work environment where every team member is valued and respected. We encourage open communication, teamwork, and professional growth. Our firm promotes a healthy work-life balance and supports the well-being of our employees. Position Summary: The Network Security Engineer is a hands-on technical role responsible for implementing, configuring, and maintaining the firm's security controls across a hybrid environment, including FortiGate firewalls, endpoint protection, cloud email and Microsoft 365, Intune-managed devices, and a co-managed monitoring and detection service. The Engineer works under the direction of the Director of Information Technology, who sets security policy and priorities for the department, and provides the technical assessment, recommendations, and documentation that support those decisions. Because the firm safeguards confidential and privileged client information, this position calls for strong technical skill, sound judgment, discretion, and clear communication with both the IT team and firm personnel. Duties and Responsibilities: Network and Perimeter Security Administer, tune, and monitor FortiGate firewalls, including security policies, VPN configuration, intrusion prevention, web and content filtering, and logging Implement and maintain network segmentation, secure remote access, and wireless security across firm locations, in line with the department's standards Maintain secure connectivity for remote and hybrid users, including VPN and conditional access Conduct scheduled reviews of firewall rules and network configurations, recommend changes to the Director of Information Technology, and maintain accurate network security documentation Endpoint, Identity, and Email Security Administer the firm's endpoint protection platforms, including CrowdStrike and Microsoft endpoint protection, covering policy configuration, detection review, containment actions, and agent coverage Configure and maintain device compliance, configuration, and application deployment through Microsoft Intune in a hybrid environment, including full-disk encryption and recovery key handling Configure and maintain identity and access controls across Microsoft Entra ID and on-premises Active Directory, including multifactor authentication, conditional access, and privileged account settings, and perform periodic access reviews Configure and maintain security settings for cloud email and collaboration, including mail flow and filtering rules, phishing and malware defenses, email authentication records, and Microsoft 365 security configuration Perform vulnerability and patch management across servers, endpoints, and network devices, including scanning, prioritizing findings, tracking remediation, and reporting status to the Director of Information Technology Monitoring, Detection, and Incident Response Serve as the day-to-day technical contact for the firm's managed monitoring service, triaging alerts, validating findings, and carrying issues through to resolution Investigate security events and perform containment, eradication, and recovery steps in accordance with the firm's incident response procedures, escalating promptly to the Director of Information Technology Contribute to the development, maintenance, and testing of the firm's incident response plan, including participation in tabletop exercises Verify that backup, recovery, and business continuity controls are functioning and tested, and support the department's disaster recovery planning Security Program Support, Privacy, and Compliance Provide technical evaluation and recommendations to support the department's selection and adoption of a recognized security framework such as the NIST Cybersecurity Framework, CIS Controls, or ISO 27001 Implement and maintain the technical controls that support the framework, and assist in assessing and reporting the firm's posture against it Assist the Director of Information Technology in drafting and maintaining information security policies, standards, and procedures, and implement the technical measures that carry them out Maintain security documentation, control evidence, and a working risk log, and recommend remediation priorities to the Director of Information Technology Support compliance with applicable privacy and data protection obligations, including the New York SHIELD Act and other state privacy requirements, and requirements applicable to regulated client data such as protected health information Prepare technical responses and supporting documentation for client security requirements, including outside counsel guidelines, security questionnaires, and client and third-party audits, and complete remediation items assigned by the Director of Information Technology Support obligations arising from clients in regulated industries, including financial services requirements such as NYDFS Part 500 as applied to the firm through client agreements Perform technical security reviews of vendors, applications, and services under consideration, and provide findings and recommendations to the Director of Information Technology Assist with independent assessments, including penetration testing and external audits, and complete assigned remediation work Awareness and Collaboration Administer the firm's security awareness program, including training delivery, phishing simulations, and user communication developed with the Director of Information Technology Partner with the IT team on secure configuration, change management, and project work, and provide technical guidance to service desk staff on security escalations Report on control status, vulnerabilities, incidents, and open remediation items to the Director of Information Technology Maintain current knowledge of emerging threats, vulnerabilities, and security technologies relevant to the legal industry, and share findings with the department Technical Skills: Required Hands-on administration of FortiGate firewalls, including policy management, VPN, intrusion prevention, and content filtering Endpoint detection and response administration, ideally CrowdStrike Falcon, and familiarity with Microsoft endpoint protection Microsoft 365 security administration, including cloud email protection, mail flow and filtering, phishing defense, and email authentication using SPF, DKIM, and DMARC Identity and access administration across Microsoft Entra ID and on-premises Active Directory in a hybrid configuration, including multifactor authentication and conditional access Microsoft Intune administration, including device compliance and configuration, application deployment, and device encryption in a hybrid environment Solid networking fundamentals, including TCP/IP, routing and switching, VLANs, DNS, DHCP, segmentation, and wireless security Vulnerability management and patch management practice, including scanning, prioritization, and remediation tracking Security monitoring and log analysis, and experience working with a managed detection and response or co-managed SOC provider Working familiarity with a recognized security framework such as the NIST Cybersecurity Framework, CIS Controls, or ISO 27001, and experience implementing controls in support of one Familiarity with privacy and data protection requirements, including state breach notification obligations and handling of regulated data Ability to produce clear technical documentation, control evidence, risk write-ups, and status reporting for both technical and non-technical readers Preferred Prior experience in a law firm or other professional services environment, including familiarity with outside counsel guidelines and client security audits Experience preparing responses to client security questionnaires and third-party risk assessments Azure or other cloud security administration PowerShell or comparable scripting for automation and reporting Experience with data loss prevention, email encryption, or information rights management Experience with security awareness platforms and phishing simulation tools Familiarity with SD-WAN, zero trust, or secure access service edge architectures Relevant certifications such as Fortinet NSE, CompTIA Security+, GIAC credentials, Microsoft SC-200 or SC-300, CISSP, or CISM Qualifications and Competencies: Strong analytical and problem-solving skills, with sound technical judgment in assessing and prioritizing risk . click apply for full job details
Job Description Job Description Benefits: Competitive salary 6-Month Contract-to-Hire (CTH) Experience Level Senior Level (5 or more years of experience) Role Overview The Network Security Engineer serves as a technical Subject Matter Expert (SME) responsible for designing, deploying, administering, and optimizing enterprise network security infrastructure. This role focuses on architecting and managing Palo Alto Networks Next-Generation Firewalls (NGFWs), Cisco Firepower/ASA firewalls, Cisco ISE (Identity Services Engine), VPN infrastructure, and SD-WAN security to protect network perimeters and secure multi-site data flows across a regulated financial institution. Key Responsibilities Firewall Engineering & Perimeter Defense • Design, deploy, and manage Palo Alto Networks Next-Generation Firewalls (NGFWs) using Panorama, configuring NAT, App-ID, User-ID, Threat Prevention, URL Filtering, and WildFire. • Administer and maintain Cisco ASA and Firepower (FTD/FMC) firewalls, managing access control policies, IPS tuning, and platform lifecycle upgrades. • Lead investigations and incident responses for network-layer security alerts, policy violations, and anomalies. Network Access Control & Secure Connectivity • Administer Cisco Identity Services Engine (ISE) for Network Access Control (NAC), 802.1X authentication, RADIUS/TACACS+, device profiling, and guest access. • Manage and maintain VPN infrastructure (Cisco AnyConnect / Secure Access and site-to-site IPSec tunnels), supporting certificate-based authentication and split-tunnel configurations. • Configure and secure Cisco Catalyst SD-WAN environments, enforcing application-aware policies, traffic segmentation, and encrypted transport. • Administer Cisco Umbrella / Secure Access DNS-layer security, category-based controls, and web filtering policies. Architecture, Compliance, & Change Management • Collaborate with Cloud, Infrastructure, and Information Security teams to implement network segmentation, zero-trust controls, and security standards aligned with PCI-DSS, SOX, and NIST frameworks. • Author, review, and execute ITIL-aligned change management requests, presenting to Change Advisory Boards (CAB) and conducting post-implementation reviews. • Maintain comprehensive technical documentation, including firewall rulesets, network security architecture diagrams, runbooks, and standard operating procedures (SOPs). Required Qualifications • 5 or more years of hands-on experience in network security engineering, enterprise firewall administration, and perimeter security (CCNP Security-level expertise). • 3 or more years of hands-on experience designing, deploying, and managing Palo Alto Networks NGFWs and Panorama. • Solid hands-on experience administering Cisco ASA and Firepower (FTD/FMC) firewall environments, access control policies, and platform upgrades. • Strong working knowledge of Cisco ISE for NAC, 802.1X, RADIUS/TACACS+, and device profiling. • Experience configuring and troubleshooting enterprise VPN solutions (Cisco AnyConnect, Secure Access, IPSec site-to-site tunnels). • Solid understanding of core networking protocols, routing, and security concepts (TCP/IP, BGP, EIGRP, ACLs, NAT, SSL/TLS inspection, network micro-segmentation). • Experience working within an ITIL-based change management framework. • Must be legally authorized to work in the United States without current or future visa sponsorship. Preferred Qualifications • Industry certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Cisco Certified Network Professional Security (CCNP Security), or CCIE Security. • Familiarity with financial regulatory frameworks and compliance standards (e.g., FFIEC, PCI-DSS, SOX, NIST CSF). • Experience with Microsoft Azure networking and cloud security (Azure Firewall, NSGs, Virtual WAN, ExpressRoute). • Experience utilizing automation scripts (e.g., Python, Ansible) for firewall configuration and policy management. Core Skills & Attributes • Exceptional analytical, problem-solving, and root-cause diagnostic abilities for complex network security issues. • High accountability and attention to detail when executing production changes and maintaining documentation. • Excellent interpersonal and communication skills to collaborate with cross-functional IT teams, security leaders, and external auditors. • Self-driven approach to continuous learning and staying current with evolving cybersecurity threats. Flexible work from home options available.
09/28/2026
Full time
Job Description Job Description Benefits: Competitive salary 6-Month Contract-to-Hire (CTH) Experience Level Senior Level (5 or more years of experience) Role Overview The Network Security Engineer serves as a technical Subject Matter Expert (SME) responsible for designing, deploying, administering, and optimizing enterprise network security infrastructure. This role focuses on architecting and managing Palo Alto Networks Next-Generation Firewalls (NGFWs), Cisco Firepower/ASA firewalls, Cisco ISE (Identity Services Engine), VPN infrastructure, and SD-WAN security to protect network perimeters and secure multi-site data flows across a regulated financial institution. Key Responsibilities Firewall Engineering & Perimeter Defense • Design, deploy, and manage Palo Alto Networks Next-Generation Firewalls (NGFWs) using Panorama, configuring NAT, App-ID, User-ID, Threat Prevention, URL Filtering, and WildFire. • Administer and maintain Cisco ASA and Firepower (FTD/FMC) firewalls, managing access control policies, IPS tuning, and platform lifecycle upgrades. • Lead investigations and incident responses for network-layer security alerts, policy violations, and anomalies. Network Access Control & Secure Connectivity • Administer Cisco Identity Services Engine (ISE) for Network Access Control (NAC), 802.1X authentication, RADIUS/TACACS+, device profiling, and guest access. • Manage and maintain VPN infrastructure (Cisco AnyConnect / Secure Access and site-to-site IPSec tunnels), supporting certificate-based authentication and split-tunnel configurations. • Configure and secure Cisco Catalyst SD-WAN environments, enforcing application-aware policies, traffic segmentation, and encrypted transport. • Administer Cisco Umbrella / Secure Access DNS-layer security, category-based controls, and web filtering policies. Architecture, Compliance, & Change Management • Collaborate with Cloud, Infrastructure, and Information Security teams to implement network segmentation, zero-trust controls, and security standards aligned with PCI-DSS, SOX, and NIST frameworks. • Author, review, and execute ITIL-aligned change management requests, presenting to Change Advisory Boards (CAB) and conducting post-implementation reviews. • Maintain comprehensive technical documentation, including firewall rulesets, network security architecture diagrams, runbooks, and standard operating procedures (SOPs). Required Qualifications • 5 or more years of hands-on experience in network security engineering, enterprise firewall administration, and perimeter security (CCNP Security-level expertise). • 3 or more years of hands-on experience designing, deploying, and managing Palo Alto Networks NGFWs and Panorama. • Solid hands-on experience administering Cisco ASA and Firepower (FTD/FMC) firewall environments, access control policies, and platform upgrades. • Strong working knowledge of Cisco ISE for NAC, 802.1X, RADIUS/TACACS+, and device profiling. • Experience configuring and troubleshooting enterprise VPN solutions (Cisco AnyConnect, Secure Access, IPSec site-to-site tunnels). • Solid understanding of core networking protocols, routing, and security concepts (TCP/IP, BGP, EIGRP, ACLs, NAT, SSL/TLS inspection, network micro-segmentation). • Experience working within an ITIL-based change management framework. • Must be legally authorized to work in the United States without current or future visa sponsorship. Preferred Qualifications • Industry certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Cisco Certified Network Professional Security (CCNP Security), or CCIE Security. • Familiarity with financial regulatory frameworks and compliance standards (e.g., FFIEC, PCI-DSS, SOX, NIST CSF). • Experience with Microsoft Azure networking and cloud security (Azure Firewall, NSGs, Virtual WAN, ExpressRoute). • Experience utilizing automation scripts (e.g., Python, Ansible) for firewall configuration and policy management. Core Skills & Attributes • Exceptional analytical, problem-solving, and root-cause diagnostic abilities for complex network security issues. • High accountability and attention to detail when executing production changes and maintaining documentation. • Excellent interpersonal and communication skills to collaborate with cross-functional IT teams, security leaders, and external auditors. • Self-driven approach to continuous learning and staying current with evolving cybersecurity threats. Flexible work from home options available.
Job Description Job Description PALO ALTO FIREWALL ENGINEER Position Description Description This is an opening for a Firewall Engineer/Team Lead to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. Program is named "Vanguard" and is an IT consolidation consisting of the Department's servers, mainframes, network devices, network perimeter, anti-virus engineering, public key infrastructure (PKI)/biometrics/encryption, monitoring tools, telephony, mobile computing platform, virtual environment, and enclave design/security engineering. This is a firewall engineer position within the Vanguard 2025 program, providing general Tier II monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is MIDs (11:00pm-7:30am), Sun-Thurs after training. During the 6-8 week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Along with being a Team Lead for the MID shift. As the Lead you will be expectant to give a turnover of events for the past shift, create weekly Quad Chart, and be able to direct work to other firewall operations staff. Must be able to guide other staff on tasks assigned to the team. Review request for time off and stay in touch with the manager on all events happening on the shift. Monitor Service Now application for Firewall Operations incident and service requests. Implements firewall rules and policies, perform troubleshoots of firewall, email, and Proxy platforms for performance issues. Analyzes network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on perimeter devices. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership daily. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend weekly teleconferences, onsite meetings, and participate in working groups as required. Qualifications Required Education & Experience BA degree and 6 years of experience; may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 5 years IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (StoneGate, Palo Alto, FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 proxy devices). CLI experience preferred. Experienced in utilizing network monitoring tools such as Nagios and NeuralStar. Basic Microsoft Windows Server 2016 implementation and troubleshooting from a security/firewall perspective. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top Secret clearance. Powered by JazzHR ZpLPHj5F0L
09/28/2026
Full time
Job Description Job Description PALO ALTO FIREWALL ENGINEER Position Description Description This is an opening for a Firewall Engineer/Team Lead to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. Program is named "Vanguard" and is an IT consolidation consisting of the Department's servers, mainframes, network devices, network perimeter, anti-virus engineering, public key infrastructure (PKI)/biometrics/encryption, monitoring tools, telephony, mobile computing platform, virtual environment, and enclave design/security engineering. This is a firewall engineer position within the Vanguard 2025 program, providing general Tier II monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is MIDs (11:00pm-7:30am), Sun-Thurs after training. During the 6-8 week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Along with being a Team Lead for the MID shift. As the Lead you will be expectant to give a turnover of events for the past shift, create weekly Quad Chart, and be able to direct work to other firewall operations staff. Must be able to guide other staff on tasks assigned to the team. Review request for time off and stay in touch with the manager on all events happening on the shift. Monitor Service Now application for Firewall Operations incident and service requests. Implements firewall rules and policies, perform troubleshoots of firewall, email, and Proxy platforms for performance issues. Analyzes network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on perimeter devices. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership daily. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend weekly teleconferences, onsite meetings, and participate in working groups as required. Qualifications Required Education & Experience BA degree and 6 years of experience; may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 5 years IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (StoneGate, Palo Alto, FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 proxy devices). CLI experience preferred. Experienced in utilizing network monitoring tools such as Nagios and NeuralStar. Basic Microsoft Windows Server 2016 implementation and troubleshooting from a security/firewall perspective. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top Secret clearance. Powered by JazzHR ZpLPHj5F0L
Perma-Fix Environmental Services, Inc.
Richland, Washington
Job Description Job Description Description: Location: Tri-Cities, WA Travel: Up to 20% Reports To: Corporate VP of IS The IS Specialist III serves as the primary on-site technology leader supporting a multi-site operation of 50-200 users. This role ensures stable, secure, and efficient IT operations while coordinating closely with the Corporate IS team for advanced engineering, development, cybersecurity, and infrastructure initiatives. This is a senior-level technical generalist role combining Windows infrastructure support, business systems reporting, project coordination, industrial systems integration, and local technical leadership. The position is hands-on and part of the broader corporate IS team, which includes senior infrastructure engineers, developers, helpdesk, and junior development resources. Duties Infrastructure & Systems Operations (Primary Focus) Serve as the local lead for Windows-based infrastructure (Windows 10/11, Microsoft 365, Active Directory, core software platforms, hardware systems, and web services). Coordinate with the corporate infrastructure team on network support, backup and disaster recovery, endpoint management, and server lifecycle planning. Escalate complex issues appropriately while maintaining local ownership and accountability. Maintain documentation of systems, diagrams, configurations, and asset inventories. Assist with user provisioning, workstation deployments, and site-level hardware standards. Project Coordination & Implementation Lead site-level technology projects from requirements gathering through deployment. Coordinate with corporate developers and infrastructure engineers on larger initiatives. Manage timelines, vendor engagement, testing, and deployment activities. Evaluate new software and hardware solutions and provide structured recommendations. Assist with task estimation, prioritization, ROI evaluation, and project documentation. Hardware Integration & Operational Support Support integration of industrial or facility systems with enterprise IT infrastructure. Coordinate system integration between hardware platforms and internal software applications. Maintain appropriate segmentation between operational and corporate systems. Security & Compliance Support Ensure local systems adhere to corporate cybersecurity policies. Support NIST 800-171 and Sarbanes-Oxley-aligned controls in coordination with Corporate IS. Assist with audits through documentation, evidence gathering, and change control support. Promote secure configuration standards and end-user security best practices. Business Systems Lead & Reporting Participate in the SDLC for waste tracking, procurement, accounting, asset management, and ancillary information systems initiatives. Develop and maintain SQL queries and SQL Server reports (SQL, SSRS, RDL). Partner with operations to develop business requirements, validate system designs, update system documentation, and oversee implementation. Assist with data validation, testing, and minor integrations. Requirements: 10+ years of progressive IT experience in systems administration, infrastructure, or business systems roles; OR a four-year related degree with 5+ years of relevant experience. Strong Microsoft ecosystem experience (Windows Server/Client, Active Directory). Solid SQL experience (query writing, stored procedures, SSRS development). Experience supporting multi-site or distributed operations. Ability to manage technical priorities independently in an operational environment. Strong written and verbal communication skills across technical and non-technical stakeholders. Prefered Experience Experience in regulated or industrial environments. Experience with .NET, Go, JavaScript, C#, or other development environments. Familiarity with waste tracking, ERP, or accounting systems. Working knowledge of network fundamentals (firewalls, VLANs, VPN). Experience coordinating technical projects. Understanding of API integrations and data exchange models. This role serves as a senior embedded technical leader and operational bridge between site operations and Corporate IS. It provides hands-on technical support, business systems insight, and practical project leadership while leveraging centralized corporate expertise for deep engineering and development functions.
09/28/2026
Full time
Job Description Job Description Description: Location: Tri-Cities, WA Travel: Up to 20% Reports To: Corporate VP of IS The IS Specialist III serves as the primary on-site technology leader supporting a multi-site operation of 50-200 users. This role ensures stable, secure, and efficient IT operations while coordinating closely with the Corporate IS team for advanced engineering, development, cybersecurity, and infrastructure initiatives. This is a senior-level technical generalist role combining Windows infrastructure support, business systems reporting, project coordination, industrial systems integration, and local technical leadership. The position is hands-on and part of the broader corporate IS team, which includes senior infrastructure engineers, developers, helpdesk, and junior development resources. Duties Infrastructure & Systems Operations (Primary Focus) Serve as the local lead for Windows-based infrastructure (Windows 10/11, Microsoft 365, Active Directory, core software platforms, hardware systems, and web services). Coordinate with the corporate infrastructure team on network support, backup and disaster recovery, endpoint management, and server lifecycle planning. Escalate complex issues appropriately while maintaining local ownership and accountability. Maintain documentation of systems, diagrams, configurations, and asset inventories. Assist with user provisioning, workstation deployments, and site-level hardware standards. Project Coordination & Implementation Lead site-level technology projects from requirements gathering through deployment. Coordinate with corporate developers and infrastructure engineers on larger initiatives. Manage timelines, vendor engagement, testing, and deployment activities. Evaluate new software and hardware solutions and provide structured recommendations. Assist with task estimation, prioritization, ROI evaluation, and project documentation. Hardware Integration & Operational Support Support integration of industrial or facility systems with enterprise IT infrastructure. Coordinate system integration between hardware platforms and internal software applications. Maintain appropriate segmentation between operational and corporate systems. Security & Compliance Support Ensure local systems adhere to corporate cybersecurity policies. Support NIST 800-171 and Sarbanes-Oxley-aligned controls in coordination with Corporate IS. Assist with audits through documentation, evidence gathering, and change control support. Promote secure configuration standards and end-user security best practices. Business Systems Lead & Reporting Participate in the SDLC for waste tracking, procurement, accounting, asset management, and ancillary information systems initiatives. Develop and maintain SQL queries and SQL Server reports (SQL, SSRS, RDL). Partner with operations to develop business requirements, validate system designs, update system documentation, and oversee implementation. Assist with data validation, testing, and minor integrations. Requirements: 10+ years of progressive IT experience in systems administration, infrastructure, or business systems roles; OR a four-year related degree with 5+ years of relevant experience. Strong Microsoft ecosystem experience (Windows Server/Client, Active Directory). Solid SQL experience (query writing, stored procedures, SSRS development). Experience supporting multi-site or distributed operations. Ability to manage technical priorities independently in an operational environment. Strong written and verbal communication skills across technical and non-technical stakeholders. Prefered Experience Experience in regulated or industrial environments. Experience with .NET, Go, JavaScript, C#, or other development environments. Familiarity with waste tracking, ERP, or accounting systems. Working knowledge of network fundamentals (firewalls, VLANs, VPN). Experience coordinating technical projects. Understanding of API integrations and data exchange models. This role serves as a senior embedded technical leader and operational bridge between site operations and Corporate IS. It provides hands-on technical support, business systems insight, and practical project leadership while leveraging centralized corporate expertise for deep engineering and development functions.
