Job Description

Position Overview 

The Network Security Engineer is responsible for designing, implementing, and maintaining secure network infrastructures that protect the organization's data, applications, and services. This role involves developing and enforcing security policies, monitoring for threats, responding to incidents, and ensuring compliance with industry standards and regulatory requirements. The engineer will work closely with IT, cloud, and cybersecurity teams to enhance the company’s security posture and provide strategic input on emerging threats and technologies. 

Key Responsibilities 

1. Network Security Design & Engineering 

• Architect, deploy, and maintain security infrastructure including firewalls, VPNs, IDS/IPS, NAC, and segmentation technologies. 

• Design secure network topologies, including DMZs, Zero-Trust zones, and micro-segmentation. 

• Implement and support security features on enterprise switches, routers, and wireless solutions. 

• Evaluate new technologies and provide recommendations to improve network security. 

2. Firewall & Perimeter Security Management 

• Manage next-generation firewalls (primarily Palo Alto, Cisco Firepower, FortiGate, Check Point). 

• Configure rule sets, security profiles, threat prevention, URL filtering, SSL decryption, and VPN tunnels. 

• Maintain site-to-site and remote-access VPNs including IKEv1/v2, IPsec, SSL, and S2S failover. 

• Conduct regular firewall audits, cleanup, and policy optimization. 

3. Monitoring, Detection, and Incident Response 

• Monitor network and security logs using SIEM/SOAR tools (e.g., Splunk, Sentinel, Cortex XSIAM). 

• Identify, investigate, and respond to security incidents and anomalous traffic. 

• Participate in root-cause analysis and develop mitigation strategies. 

• Support threat hunting and continuous security improvement initiatives. 

4. Vulnerability & Risk Management 

• Perform vulnerability assessments for network devices and applications. 

• Coordinate patching cycles with IT and operations teams. 

• Document and track remediation efforts and validate fixes. 

• Conduct security risk assessments on new technologies, vendors, or network changes. 

5. Policy, Compliance & Documentation 

• Develop and maintain security policies, standards, and procedures. 

• Ensure compliance with regulatory frameworks (NIST, ISO 27001, CIS, PCI-DSS, NERC-CIP, IEC-62443). 

• Maintain detailed network documentation including diagrams, configurations, inventories, and baselines. 

• Follow proper change management, rule review, and peer approval processes. 

6. Cloud, Automation & Integrations (Preferred) 

• Support Checkpoint Harmony or Prisma Cloud deployments (optional but beneficial). 

• Automate tasks using Ansible, Terraform, or Pan-OS XML API / REST API. 

• Integrate firewalls with logging, PKI, MFA, SD-WAN, or security orchestration tools. 

7. Cross-Team Collaboration 

• Work with network engineers, cloud teams, systems engineers, and DevOps to ensure secure deployments. 

• Provide Tier-3 support for escalated network & network security issues. 

• Participate in change management meetings, architecture reviews, and project planning. 

Requirements

Required Qualifications 

• Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience). 

• 3–7 years of hands-on experience in network security engineering. 

• CCNP Enterprise or equivalent certifications

• Strong understanding of TCP/IP, routing/switching, VLANs, VPNs, and Layer 2/3 protocols. 

• Expertise in one or more firewall platforms (Palo Alto, Cisco ASA/Firepower, Fortinet, Check Point). 

• Experience with IDS/IPS, NAC (Cisco ISE, Aruba ClearPass), and network segmentation. 

• Proficiency with SIEM tools, packet analysis, and log analysis. 

• Solid understanding of security frameworks (NIST CSF, CIS Controls) and regulatory standards. 

Preferred/Advanced Qualifications 

• Professional certifications such as: 

• PCNSE, Palo Alto ACE, CCNP Security, CCIE Security, CISSP, CEH, GSEC 

• Experience in: 

• Cloud security: AWS, Azure, GCP 

• OT/ICS security (ISA/IEC-62443, Purdue Model) 

• Automation & scripting: Python, Ansible, Terraform 

• SD-WAN and SASE / ZTNA 2.0 platforms architectures

• Strata Cloud Manager / AIOps 

• Checkpoint Harmony Access deployments 

• Knowledge of EDR/XDR platforms and SOAR automation. 

Soft Skills 

• Strong analytical and problem-solving abilities. 

• Excellent communication and documentation skills. 

• Ability to work independently and in cross-functional teams. 

• Strong organizational skills and attention to detail. 

• Collaboration with different teams, such as network, cloud, SOC, and architecture teams 

• Ability to work in high-pressure environments, especially during incidents. 

Job Type & Work Environment 

• Full-time position. 

• 90% Remote with 10% required travel to sites 

• May require participating in an on-call rotation. 

Benefits

Compensation And Benefits

This role offers a base salary of $120,000 – $140,000 (DOE)

Our salary ranges are determined by role, level, and location. Within each posted range, individual pay is determined (and may be greater or higher), dependent on work location and additional factors, including job-related skills, experience, and relevant education or training. Terabase offers competitive compensation along with a comprehensive benefits package, including:

• Generous time off and holiday policy

• Remote flexibility

• Flexible time off

• Comprehensive benefits package

• Career progression

• 401k match

• Stock options

• Home office set up allowance

• And much more!

Terabase is an equal opportunity employer. We recruit, hire, employ, train, promote, and compensate individuals based on job-related qualifications and abilities. We strongly encourage people of all backgrounds to apply.

We do not discriminate for any reason including race, color, sex, gender, age, religion or religious creed, national origin, ancestry, citizenship, marital status, sexual orientation, gender identity, gender expression, genetic information, physical or mental disability, military/ veteran status, or any other characteristic protected by law.

We offer a welcoming and inclusive environment in service to one another, our products, the diverse consumers we represent, and the communities we call home.

Principles only. This role is not open to receiving agency candidates, and any contingent submissions will not be considered. Terabase Energy does not utilize third-party recruitment agencies. Please contact our Recruiting team at careers@terabase.energy with any staffing-related inquiries.

Job Tags

Similar Jobs