Senior Network Security Engineer Contract to hire Remote
Project Scope:

Add a Senior Firewall / Network Security Engineer on a contract-to-hire basis to address a longer-term hiring need and alleviate significant workload on the existing team.
Team is coming out of a major security breach and is balancing daily remediation efforts with a growing pipeline of security projects.
Heavy focus on on-prem firewall/security engineering, while the broader organization continues migrating from on-prem into cloud.
Major initiatives include macro/micro segmentation, data center restructuring, annex/small-office security solutions, firewall remediation, and security architecture/design.
Project engineering is the priority, with ongoing BAU/support responsibilities secondary.

Team Size & Breakdown:

Small network/security team currently struggling to keep up with project and remediation demand.
Resource needs to be highly independent because there is very little capacity for hand-holding.
Looking for someone who can drive solutions and provide technical leadership, rather than simply take orders or execute tickets.

Development Methodology:

Current environment is largely manual, particularly around security/network infrastructure.
Engineer will need to assess existing environments, understand dependencies/traffic flows, design solutions, implement changes, and document the environment.
Documentation is important because there are significant legacy complexities
Automation and Infrastructure as Code would be valuable modernization opportunities, but they are not current-state requirements.

High-Level Individual Duties:

Hands-on engineering and policy management across Check Point and Cisco FTD / Firepower.
Design, configure, troubleshoot, and improve firewall policies, rules, traffic flows, and network segmentation.
Lead macro and micro segmentation initiatives and contribute to security remediation following the breach.
Provide design/architecture support for data center restructuring, annex locations, small-office environments, and other security projects.
Reverse-engineer complicated/legacy network environments and independently determine how solutions should be designed and implemented.
Create and improve technical documentation.
Secondary responsibility supporting ongoing BAU firewall/network security operations.

Must-Haves (Concepts & Tools):

Both Check Point AND Cisco FTD / Firepower are required.
Strong hands-on firewall engineering and firewall policy experience.
Macro and micro network segmentation.
Strong network/security fundamentals, including understanding traffic flows, firewall rules/policies, connectivity, and troubleshooting.
Senior-level engineer capable of designing their own solutions and then implementing them.
Ability to independently understand a complicated, legacy, and potentially poorly documented network.
Must be a driver/leader rather than an order-taker.
Hands-on engineering mentality with enough architecture experience to own technical designs.

Nice-to-Haves:

Senior Network Security Engineer

Key skills