Network Security Engineer

Responsibilities

• Network Security Architecture & Engineering
  • Design and implement secure network architectures across cloud, on-premise, and edge/IoT environments.
  • Configure and maintain firewalls, VPNs, network segmentation, NAC, and secure remote access solutions.
  • Evaluate and deploy new security technologies and controls.
• Security Operations & Incident Response
  • Monitor network activity and security alerts.
  • Investigate suspicious activity, security events, and potential breaches.
  • Lead containment, remediation, and post-incident reviews.
• Vulnerability Management & Risk Reduction
  • Oversee vulnerability assessments, penetration testing, and security reviews.
  • Prioritize and remediate identified risks and security gaps.
  • Maintain security hardening standards and best practices.
• Cloud & Infrastructure Security
  • Secure cloud infrastructure, network connectivity, and identity/access controls.
  • Partner with Infrastructure and Engineering teams to embed security into deployments and operations.
  • Support secure scaling of systems, services, and environments.
• IoT/Edge Networking/Security
  • Implement zero-touch provisioning and secure identity management for edge hardware to ensure fleet integrity.
  • Architect secure, low-latency remote access and mesh VPN solutions for intra-fleet communication, field support and fleet maintenance.
  • Work with customers for networking integration.
• Governance, Compliance & Security Enablement
  • Support compliance initiatives (SOC 2, ISO 27001, NIST, etc.).
  • Develop security policies, standards, and documentation.
  • Provide security guidance and training to internal teams.

Experience

• 3+ years of experience in network security, cybersecurity engineering, or infrastructure security roles.
• Strong knowledge of networking protocols and technologies including TCP/IP, DNS, DHCP, VPN, routing, and switching.
• Hands-on experience with security technologies such as firewalls, endpoint protection, and vulnerability management tools.
• Experience securing cloud environments such as AWS or Google Cloud Platform.
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Computer Engineering, or a related technical field.

Bonus Qualifications

• Hands-on experience with software defined mesh VPN systems like WireGuards, Tailscale, etc.
• Familiarity with security frameworks and compliance standards such as SOC 2.
• Strong incident response, threat detection, and security troubleshooting skills.
• Relevant certifications such as CISSP, CCNP Security, Security+, GSEC, or equivalent.