Network Security Engineer

ICONMA is an IT Services and Consultant company seeking a Network Security Engineer for their Remote location. The role involves defining and governing network security architecture patterns and providing guidance to teams to ensure security standards are met across various environments.

Responsibilities:

• Define, govern, and accelerate repeatable network security architecture patterns supporting acquired entity integrations across cloud, hybrid, and on-premises environments
• Review, validate, and approve firewall requests and network connectivity requirements to ensure alignment with enterprise security standards and operational requirements
• Provide architecture guidance and decision support to engineering and delivery teams by translating enterprise security standards into practical, repeatable implementation patterns
• Design and oversee complex network security solutions, including segmentation strategies, trust boundaries, ingress/egress controls, routing, DNS, proxy services, IDS/IPS, DLP, and logging architectures
• Partner cross-functionally with Security Architecture, Cloud Security Engineering, Cyber Defense, Data Security, Infrastructure, and Acquisition Integration teams to remove deployment blockers and accelerate secure onboarding of acquired environments

Requirements:

• 8+ years of experience in enterprise network security architecture, network security engineering, infrastructure security design, or related disciplines
• 5+ years of hands-on experience designing and implementing network security controls across cloud, hybrid, and on-premises environments
• Demonstrated experience reviewing, validating, and approving firewall requests, firewall rule patterns, and network connectivity requirements against enterprise security standards
• Strong expertise in network segmentation, ZerTrust Network Access (ZTNA), network access control lists (ACLs), trust-boundary design, and hub-and-spoke or regional network architectures
• Proven experience designing and implementing secure routing, load balancing, Web Application Firewall (WAF), proxy architectures, DDoS protection, and network dependency mapping
• Experience developing and governing enterprise network security architecture patterns across trusted, federated, untrusted, hybrid, cloud, and on-premises environments
• Ability to evaluate architecture tradeoffs while maintaining compliance with enterprise security standards and strategic architecture direction
• Experience supporting network security requirements for acquisitions, mergers, or complex integration initiatives
• Strong collaboration, communication, and stakeholder management skills with the ability to work across security, infrastructure, engineering, application, and program management teams
• Experience using enterprise-approved automation platforms, AI-assisted technologies, and workflow optimization tools to improve productivity and decision-making
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related technical field; or 4+ years of equivalent network security experience in lieu of degree
• Experience designing network security architecture within healthcare, highly regulated, or large enterprise environments
• Strong understanding of: Firewall governance and approval processes, Cloud network security controls, Acquired entity (AE) integration and onboarding patterns, Audit evidence collection and control validation requirements
• Experience documenting complex architecture decisions and presenting recommendations to executive leadership, engineering teams, security teams, and compliance stakeholders
• Experience leveraging AI productivity tools and network automation capabilities to accelerate architecture reviews, documentation, and operational workflows
• Knowledge of enterprise security domains including: IDS/IPS, Data Loss Prevention (DLP), DNS security, Secure proxy architectures, Private connectivity solutions, Logging and monitoring architectures
• Industry certifications preferred: CISSP, CCSP, CCNP Security, PalAltNetworks Certified Network Security Engineer (PCNSE), Cloud security and networking certifications (AWS, Azure, GCP, etc.)
• The ideal candidate will possess deep expertise in enterprise network security architecture within large, complex organizations. Experience in healthcare, insurance, financial services, or other highly regulated industries is strongly preferred. Candidates should have a demonstrated track record designing secure network architectures across cloud, hybrid, and on-premises environments, ideally including acquisition integrations, large-scale transformations, or enterprise network modernization initiatives
• Experience working with enterprise firewall governance, segmentation programs, ZerTrust initiatives, cloud networking, and security architecture review boards is highly desirable. Exposure to mergers and acquisitions, transitional architecture design, and large-scale enterprise security programs is a significant advantage