Network Security Engineer

Role Summary

This role supports the transition of server and container environments to default-deny internet access across development, pre-production, and production. The position focuses on server-side break-and-inspect proxying, outbound traffic visibility, and precise, least-privilege policy design. You will collaborate with proxy engineers, network, firewall, application, and infrastructure teams to analyze traffic, troubleshoot connectivity, and implement secure policy changes. The role operates within formal change-control processes and requires coordination across multiple time zones.

Responsibilities

• Enable and operate default-deny internet access controls for servers and containers across development, pre-production, and production environments.
• Design and implement server-side break-and-inspect proxy policies for full-path visibility into outbound traffic.
• Build path-aware policies that replace broad default-deny rules with precise, least-privilege access.
• Route untrusted CDN domains, including content hosted on Fastly and Cloudflare, through the proxy for inspection and control.
• Analyze server and container outbound traffic to identify required destinations and validate policy changes before and after implementation.
• Troubleshoot blocked or failing connections using Layer 4 through Layer 7 analysis.
• Partner with application and infrastructure owners to resolve connectivity and policy issues.
• Support firewall rule cleanup and target-state security design, aligning proxy and firewall controls.
• Execute proxy policy and configuration changes under formal change-control processes, including testing and rollback planning.
• Document policy designs, exceptions, and operational procedures, and coordinate handoffs with teams in other time zones.

Qualifications

• Hands-on enterprise proxy experience with Blue Coat, Symantec, Skyhigh, or similar platforms.
• Strong routing knowledge and a solid understanding of Layer 4 through Layer 7 traffic behavior.
• Ability to learn proxy policy construction and apply that knowledge to new security designs.
• Experience working in a change-controlled enterprise environment.
• Clear written communication skills and the ability to collaborate with teams across time zones.
• Experience with Layer 7 application-aware inspection and policy.
• Exposure to container or Kubernetes networking.
• Firewall rule management experience, including AlgoSec, and familiarity with SaaS, IaaS, and PaaS traffic patterns.
• Financial services industry experience is preferred.

Publishing Pay Range: $70.00 – $78.00 hourly

This position offers a hybrid schedule, with time split between the office and remote work.