Network Security Engineer

Title: Network Security Engineer Remote role Job Description: Required Skills and Experience (3–5 years): - Strong networking fundamentals: TCP/IP, routing/switching, VLANs, DNS, load balancing concepts, security zones; solid understanding of HTTP/HTTPS and TLS/SSL for web traffic analysis. - Secure web proxy technologies: experience with on prem proxy platforms (e.g., Broadcom/Blue Coat ProxySG or comparable); ability to implement and validate proxy policies and PAC files; skilled with packet captures, HTTP debugging, and log/flow analysis. - Enterprise VPN: hands on with site to site and/or remote access VPNs (IPsec, IKEv2, SSL VPN), including policy, routing, authentication integration, and troubleshooting. - Practical scripting for operations (bash/shell and/or Python) and simple Ansible playbooks; familiarity with vendor APIs is a plus. - Experience using SIEM tools for investigation and incident triage. - Comfortable with change management: concise implementation/rollback plans and post change validation. - Strong problem solving, communication, and teamwork. Job Responsibilities: - Engineers manage their book of work in Agile Scrum by prioritizing the backlog, committing in sprint planning, and delivering in short iterations. - Execute project driven changes for proxies and VPN gateways using standardized change templates and runbooks (policy updates, routing/steering, segmentation, NAT where applicable). - Build, test, and deploy proxy policies (URL filtering, SSL/TLS inspection where applicable, malware/threat profiles, access controls), including certificate handling, PAC files, and traffic steering. - Collaborate with network, security, and application teams to align proxy and VPN designs with business and security requirements. - Develop and maintain concise operational documentation and runbooks; contribute lightweight automation (shell/Python/Ansible) for configuration checks and validation.