Job Description
• Network Security Engineering: Design and implement robust security solutions, including next-generation firewalls (NGFW), VPNs, and Intrusion Detection/Prevention Systems (IDS/IPS).
• Vulnerability & Risk Assessment: Conduct regular vulnerability scans and penetration tests to identify and remediate network weaknesses.
• Incident Response: Act as a Tier 2/3 responder for network-related security incidents, conducting root cause analysis and documenting resolutions for audit trails.
• Policy & Documentation: Develop and maintain Standard Operating Procedures (SOPs), network diagrams, and security policies that fulfill compliance documentation needs.
• Policy Governance: Develop, review, and enforce Network Security Policies, including Zero Trust architecture principles and micro-segmentation strategies.
• Hardening & Configuration: Design and implement secure configurations for routers, switches, and firewalls (e.g., Cisco IOS Hardening) to mitigate identified audit gaps.
• Network Defense Implementation: Configure and manage NGFWs, WAFs, and VPN gateways, ensuring all configurations map directly back to a specific NIST SP 800-53 or SOC control.
• Vulnerability Remediation: Take ownership of network-layer vulnerability scan results, coordinating with engineering teams to patch or apply compensating controls.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Required Skills & Experience
-3-5 years of experience in network engineering or network security engineering
-Strong Python scripting experience for network automation efforts.
-Experience with Ansible or Terraform, Ansible strongly preferred
-Strong background with IAC
-Advanced network observability skills with ability to own gap analysis through remediation
-Expert knowledge of TCP/IP, routing/switching (Cisco/Juniper), and network security zoning.
-Ability to correlate disparate logs from firewalls, routers, and servers to identify sophisticated attack patterns.
-Ability to explain complex technical vulnerabilities to non-technical stakeholders and auditors.
-Meticulous documentation of configuration changes to maintain "audit-ready" status at all times.
Nice to Have Skills & Experience
-Network Automation certifications
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.