Network Security Engineer II

Impelix is hiring a Network Security Engineer II to serve as the technical owner for assigned managed service clients. The role handles network and security troubleshooting, incident response, client configuration changes, monitoring, documentation, and security improvements.

Responsibilities:

• Serve as the technical owner for assigned clients, advising them on and implementing configuration changes and incident resolution
• Own support tickets from initial assessment through resolution, prioritizing by urgency, business impact, and SLAs within a follow the sun model
• Communicate proactively with clients on status and next steps, meeting the responsiveness standards in the Impelix
• Diagnose and resolve complex network and security issues including escalations from level 1 monitoring systems and solutions
• Make independent decisions on troubleshooting and remediation, engaging senior engineers on complex issues and escalations, and flagging requests that require architectural changes or new deployments for Professional Services
• Troubleshoot switching, routing, wireless, and WAN circuit issues, including working with carriers to resolve circuit outages and degradation
• Lead root cause analysis and implement fixes that prevent recurring issues
• Track time accurately in ConnectWise
• Participate in a rotating weekend on-call schedule, covering at least one weekend per month, including monitoring, operational support, and incident response
• Participate in small client projects while being responsible for delivering on committed timelines and support select client engagements as needed
• Engage in small team projects for process and quality improvement
• Maintain updated documentation of client networks
• Plan, risk-assess, and execute changes for client environments, including scheduling maintenance windows and defining rollback steps, with senior engineer review where required
• Implement firewall configuration changes on Palo Alto and Check Point platforms, including, but not limited to, security policies, NAT, and site-to-site and remote access VPNs
• Make routine network changes such as adding VLANs, interfaces, and routes
• Assist with firmware and OS upgrades and like-for-like hardware replacements
• Support platforms such as CrowdStrike, Meraki, and identity solutions (Okta) across client environments
• Monitor network performance and system health using LogicMonitor and other tools
• Conduct periodic network and system audits for performance and policy compliance
• Recommend and implement performance improvements and optimizations
• Support incident response for major outages and service disruptions
• Coordinate with other teams to resolve complex issues
• Document incidents thoroughly and contribute to incident reports and analysis
• Create and maintain client documentation, including knowledge base articles and network diagrams
• Work alongside Impelix’s AI agents and help keep our Service Delivery knowledge base accurate, so both people and automation have what they need
• Verify that security standards are applied correctly when making changes to clients’ environments
• Build and maintain firewall security policies and rulesets for client environments in line with Impelix security standards
• Stay current on emerging threats and recommend protective measures

Requirements:

• Minimum of three years' experience with IP networks and network security, including routing and firewall operations
• Strong analytical skills and problem-solving ability
• Strong communication skills for regular interaction with clients, partners, and vendors
• Ability to work independently as well as within a team environment
• Experience troubleshooting core networking devices (routers, switches, wireless)
• Experience troubleshooting WAN circuits and working with carriers to resolve issues
• Hands-on experience configuring and troubleshooting Palo Alto, Check Point, and/or Cisco next-generation firewalls (NGFW), including security policies, NAT, and VPNs
• Solid understanding of network protocols (e.g., TCP/IP, BGP, OSPF, MPLS)
• Familiarity with troubleshooting cloud networking problems (AWS, Azure)
• Working knowledge of Linux commands
• Experience with IP packet analysis tools (e.g., Wireshark, tcpdump)
• Experience with network monitoring and management tools
• Ability to create network diagrams and documentation
• Experience with scripting and automation (e.g., Python, Ansible, PowerShell)
• Experience with public cloud infrastructure ( AWS, Google, Azure )
• Previous experience working in an MSP or multi-client IT support environment
• Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP)
• Palo Alto PCNSA or Check Point CCSA
• ITIL Foundation Certification
• Other relevant industry certifications