Network Security Engineer

Job Summary

Network Security Responsibilities

• Implement, configure, and maintain firewalls, VPNs, IDS/IPS, and secure network infrastructure.
• Configure firewall policies, NAT, VPN, access controls, and network security rules.
• Monitor security events, network traffic, logs, and alerts for potential threats.
• Perform security hardening and vulnerability remediation.

Cryptography Responsibilities

• Manage cryptographic key management and encryption solutions.
• Configure and administer HSM and KMS environments.
• Manage key generation, distribution, rotation, backup, recovery, archival, and destruction.
• Support PKI, digital certificates, TLS/SSL, and certificate lifecycle management.
• Integrate HSM and KMS solutions with devices, applications, databases, payment systems, and security platforms.

Delivery and Collaboration

• Participate in security implementations, migrations, upgrades, and customer or project deployments.
• Troubleshoot network security, encryption, certificate, HSM, and key-management issues.
• Maintain technical documentation, network diagrams, configuration records, and operational procedures.
• Work with cybersecurity, infrastructure, application, and compliance teams on secure implementations.
• Provide technical support and participate in professional services or customer-facing engagements when required.

Mandatory Skills

• Network security, firewall administration, IPsec and SSL VPN, IDS/IPS, TCP/IP, DNS, DHCP, HTTP/HTTPS, routing and switching, and network troubleshooting.
• Security monitoring, log analysis, and network security hardening.
• Cryptographic key management, HSM, KMS, encryption, and cryptography.
• Key generation, lifecycle management, rotation, secure storage, PKI, digital certificates, TLS/SSL, PKCS#11, and KMIP.

Preferred Technologies

• Thales HSM, CipherTrust, Entrust HSM, IBM Key Protect, AWS KMS, Azure Key Vault, or HashiCorp Vault.
• FortiGate, Palo Alto, Check Point, FortiManager, FortiAnalyzer, SIEM platforms, or vulnerability management tools.

Education and Certifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Networking, or a related field.
• Preferred certifications include CCNA, CCNP Security, Fortinet, Palo Alto, Check Point, Security+, CEH, CISSP, or vendor-specific HSM, KMS, and PKI certifications.