Senior Network Security Engineer

Job Description

We are seeking a Senior Network & Security Engineer with 1015 years of hands-on experience to lead complex enterprise infrastructure projects. This 100% travel-based role requires on-site presence from project initiation through to handover. The ideal candidate will have deep expertise across networking, security, data center, voice, and storage technologies, with a strong ability to adapt to new tools and environments. Roles and Responsibilities Network Design & Implementation: Design, install, and configure enterprise-grade network hardware including routers, switches (Cisco Nexus, Catalyst), and wireless access points. Performance Monitoring & Troubleshooting: Continuously monitor network performance, troubleshoot issues, and optimize throughput, latency, and reliability. Network Maintenance: Perform regular updates, patches, and configuration changes to ensure optimal security and functionality. Infrastructure Management: Manage and optimize network monitoring and alerting tools for proactive incident response. Documentation: Maintain detailed network diagrams, IP schemas, and configuration backups. Advanced Network Configurations: Implement VPNs, VLANs, QoS, routing protocols (OSPF, BGP, EIGRP), Layer 2/3 protocols (HSRP, VRF, STP, LACP, VXLAN). Data Center Engineering: Architect and deploy modern data center networks using Cisco Nexus 9000 series and Cisco ACI fabric, including advanced features like vPC, VDC, VXLAN EVPN. Security Integration: Work with firewalls (Palo Alto, Fortinet, Cisco ASA/Firepower), micro-segmentation strategies, and implement security best practices. Security Operations: Implement and manage firewalls, IDS/IPS, SIEM, and endpoint protection; monitor for threats and conduct incident response and vulnerability assessments. Collaboration & Support: Provide guidance to internal IT and DevOps teams, ensure secure CI/CD pipelines, and support secure system deployments. Application Delivery: Configure and maintain ADCs such as F5 BIG-IP (LTM, GTM, ASM), NGINX, HAProxy for traffic management, application performance tuning, and session persistence. VoIP Systems: Manage VoIP platforms (Cisco CUCM), SBCs, gateways, and voice policies; troubleshoot call flows using tools like Wireshark. Storage Networking: Design and support SAN environments using Cisco MDS 9000 switches, perform zoning and VSAN configuration, and manage storage arrays (NetApp, HPE). Security & Compliance: Conduct threat modeling, ensure compliance with frameworks (NIST, ISO 27001, MITRE ATT&CK), and maintain up-to-date documentation and audit trails. Desired Skills/Background Experience: 10–15 years in enterprise networking and security roles with proven, hands-on implementation and support experience. Travel Requirement: 100% travel; must be available to remain at client sites for the full project duration. Technical Proficiency in Cisco Nexus, IOS-XE, NX-OS, ACI, Routing protocols (OSPF, BGP, EIGRP), VXLAN EVPN, VRF, HSRP, Firewalls: Palo Alto, Cisco ASA/Firepower, Fortinet, ADCs: F5 BIG-IP, HAProxy, NGINX, SIEM: Splunk, QRadar; IDS/IPS systems, VoIP technologies (CUCM, SIP, RTP, SCCP, dial-peers), SAN: Cisco MDS, Fibre Channel, NetApp ONTAP, HPE Primera Tools: Wireshark, VoIP monitoring, DDoS protection platforms Deep understanding of TCP/IP, security threats, DDoS, common network attack vectors Strong communication, problem-solving, and documentation skills Ability to quickly learn and integrate new technologies as required by client environments