Network Security Engineer

Role Summary

This Firewall Security Engineer role focuses on identifying and remediating overly permissive firewall rules and routing configurations in an enterprise environment. The engineer will use rule-analysis tools, traffic-flow analysis, and validated application requirements to implement least-privilege access changes safely. This role partners with application, infrastructure, network, architecture, and security teams while working within formal change-control processes. The US-based engineer supports the Eastern time zone within a follow-the-sun operating model alongside teams in the UK and India.

Responsibilities

• Review and optimize firewall rules using AlgoSec analysis, including rule usage, risk, shadowed rules, and redundant rules.
• Narrow sources, destinations, services, and ports based on observed traffic and validated application requirements.
• Identify routing configurations that bypass proxy controls and coordinate remediation with network and infrastructure teams.
• Analyze Layer 4 through Layer 7 traffic flows to validate business requirements before modifying or removing access rules.
• Partner with application and infrastructure owners to assess proposed changes, confirm impacts, and validate results after implementation.
• Prepare and execute firewall and routing changes through formal change-control processes, including implementation plans, testing, and rollback procedures.
• Document rule changes, business rationale, approvals, and validation results to support effective handoffs across time zones.
• Participate in follow-the-sun handoffs and status updates while tracking progress and open remediation items.
• Align firewall and routing remediation with target-state security architecture and escalate conflicts or gaps to architecture and security teams.
• Support audit and risk reviews by providing evidence of changes, approvals, testing, and outcomes.

Qualifications

• Hands-on experience with firewall engineering and firewall rule-base optimization in an enterprise environment.
• Strong routing knowledge and understanding of Layer 4 through Layer 7 traffic behavior.
• Ability to analyze traffic flows and determine least-privilege access requirements for applications.
• Experience working within formal change-control processes in a regulated enterprise environment.
• Strong written communication skills and a disciplined approach to documenting technical work.
• Ability to collaborate effectively with application, infrastructure, network, architecture, and security teams across multiple time zones.
• Experience with AlgoSec or similar firewall rule-analysis and policy-management tools preferred.
• Proxy technology experience, such as Blue Coat, Symantec, or Skyhigh, preferred.
• Financial services industry experience preferred.
• Relevant education, training, certifications, or equivalent practical experience.

Publishing Pay Range: $60.00 – $70.00 hourly

This position offers a hybrid schedule, with time split between the office and remote work.