Network Security Engineer

Job Description

• Must Have Technical/Functional Skills
  • Network Protocols: TCP/IP, UDP, BGP, OSPF, EIGRP, MPLS, ISIS
  • Layer 4 (Transport Layer): TCP, UDP, SSL termination (TLS offload)
  • Layer 7 (Application Layer): HTTP, HTTPS, Web Socket handling; URL rewriting, header injection, cookie persistence;
    Web Gateway & DNS
  • Zscaler (ZIA & ZPA) Administration, Infoblox Management
  • Health Monitoring: Setting up custom health checks (HTTP 200 OK, TCP connection, etc.)
  • WAN Technologies: MPLS, Metro Ethernet, SD-WAN, VPNs (IPSec, GRE, DMVPN), Leased Lines, LTE/5G Backup links.
  • Hardware Knowledge: Cisco Routers/Switches (ISR, ASR), Palo Alto Firewall, F5 BIG‑IP (LTM, GTM/DNS, APM)
  • Routing and Switching: Advanced configuration and troubleshooting (static/dynamic routing, VLANs, STP, Trunking, etc.)
  • Firewall and Security: Knowledge of firewalls (Palo Alto), ACLs, VPN security, IDS/IPS basics.
  • SD‑WAN Solutions: Familiarity with Cisco Viptela, Meraki SD‑WAN
  • Monitoring and Troubleshooting Tools: Datadog, Thousand Eyes, Vital‑net, Nagios, Stealth Watch
  • Cloud Networking: AWS VPC/DX/Transit Gateway, Azure Virtual WAN, GCP networking
  • Traffic Management
    
    Skills:
    
    Load balancing methods (Round Robin, Least Connections, Weighted Least Response Time);
    Persistence and Stickiness (Source IP, Session Cookie, SSL ‑based persistence);
    Global Server Load Balancing (GSLB)
  • SSL offloading, re‑encryption, SSL bridging
• Roles & Responsibilities
  • Web Proxy Monitoring and Management; monitor Zscaler (ZIA/ZPA) latency, packet loss, performance degradation
  • Use monitoring tools (Thousand Eyes, Net Flow analyzers, Datadog, Vital‑net) to detect and troubleshoot network issues
  • Respond to network escalations 24/7 (sometimes on‑call)
  • Incident response and troubleshooting: diagnose Web proxy, VPN, DNS issues; engage vendor support on escalated tickets; perform first‑ and second‑level troubleshooting on Zscaler, DNS & VPN
  • Maintenance and upgrades: apply routine firmware/software updates; assist scheduled maintenance windows for device replacement and hardware upgrades; backup and restore device configuration
  • Change management: implement approved network changes (VPN tunnel creation, DNS addition/deletion, proxy policy changes); follow ITIL or internal change processes (RFCs, peer reviews, rollback planning)
  • Documentation and reporting: update network diagrams, IP addressing documentation and hardware inventories; develop KB articles on Web gateway, VPN and DNS; coordinate with product manufacturers and hardware support vendors; manage RMA for hardware failures

Base Salary Range: $100,000 to $135,000 Per Annum

• Discretionary Annual Incentive
• Comprehensive Medical Coverage:
  Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans
• Family Support:
  Maternal & Parental Leaves
• Insurance Options:
  Auto & Home Insurance, Identity Theft Protection
• Convenience & Professional Growth:
  Commuter Benefits & Certification & Training Reimbursement
• Time Off:
  Vacation, Time Off, Sick Leave & Holidays
• Legal & Financial Assistance:
  Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing

Bachelor of Computer Science