Network Security Engineer
MANOJ SHUKLAUnited StatesMIDPosted 2h ago
NGFWUTMURL filteringLayer-7 inspectionIDS/IPS802.1XNACVPNITSMChange managementPythonAnsibleTerraform
About the Role
We are seeking a Network Security Engineer for a 6-month contract position in Foster City, CA. This role involves administering next-generation firewall and UTM platforms, operating URL filtering and Layer-7 inspection policies, and supporting network access control and remote access VPN.
Key Responsibilities
• Administer next-gen firewall and UTM platforms, including policy changes, rule cleanup, software and signature updates, and certificate renewals
• Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling
• Tune IDS/IPS signatures, reduce false positives, and escalate confirmed detections to the security operations team
• Support 802.1X network access control, including supplicant, certificate, and policy troubleshooting and onboarding new device types
• Support remote access VPN, including client troubleshooting, access and split-tunnel policy changes, and availability monitoring
• Work the ticket queue to SLA with clear written updates to requesters
• Maintain runbooks, network diagrams, and configuration documentation
• Deliver scoped projects, including an 802.1X expansion and segmentation with SSL decryption enforcement
Requirements
• 5+ years of network security engineering supporting production environments
• 5+ years of IT systems or application engineering and administration
• Strong working knowledge of all layers of the OSI model
• Hands-on Layer-7 protection experience: application control, TLS inspection, IPS, URL and DNS filtering
• Direct experience administering enterprise NGFW/UTM platforms
• Experience implementing and supporting 802.1X wired and wireless NAC
• Experience with enterprise remote access VPN
• Experience working within a formal change management process, with clear written and verbal communication across security, IT, product, and operations teams