Network Security Engineer

Network Security Engineer

We are seeking an experienced Network Security / Firewall Engineer to design, implement, operate, and troubleshoot enterprise network security infrastructure. The ideal candidate will have strong hands-on experience with Cisco Firepower Threat Defense (FTD/FMC) or comparable next-generation firewall platforms, along with solid knowledge of enterprise routing, VPN technologies, network segmentation, cloud networking, and security best practices. This is a hands-on engineering role requiring strong troubleshooting skills and the ability to work across network, security, cloud, application, and infrastructure teams.

Key Responsibilities

• Configure, manage, maintain, and troubleshoot enterprise next-generation firewall environments.
• Administer Cisco FTD firewalls using Firepower Management Center (FMC).
• Create and maintain firewall access-control policies, network/service objects, security zones, and NAT policies.
• Design, configure, and troubleshoot site-to-site IPsec VPNs and remote-access VPN solutions.
• Troubleshoot complex application connectivity issues across firewalls and network infrastructure.
• Perform packet-level troubleshooting using packet captures, Wireshark, firewall connection/session tables, logs, and platform-specific diagnostic tools.
• Configure and troubleshoot NAT/PAT, static NAT, source NAT, destination NAT, and NAT exemptions.
• Support firewall high-availability architectures and perform failover testing.
• Participate in firewall upgrades, migrations, hardware refreshes, and lifecycle-management activities.
• Review firewall policies and identify obsolete, redundant, overly permissive, or unused rules and objects.
• Support network segmentation and security-zone architecture.
• Configure and troubleshoot web/URL filtering, IPS/IDS, application control, malware protection, and other NGFW security capabilities.
• Support security infrastructure across on-premises data centers, branch locations, Internet edge, and cloud environments.
• Participate in incident response and root-cause analysis for network and security incidents.
• Create and maintain network diagrams, firewall documentation, operational procedures, implementation plans, and troubleshooting runbooks.
• Participate in change-management processes, including planning, peer review, implementation, validation, and rollback procedures.

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.