Senior Network Engineer - SNE 26-13702

Job Overview

We are seeking a detail-oriented Senior Network Engineer to lead the hardening, optimization, and modernization of enterprise network infrastructure. This role focuses on auditing legacy configurations, enforcing strict network segmentation, and advancing the network environment toward a Zero Trust security architecture.

The ideal candidate will have strong experience in firewall governance, Access Control List (ACL) management, network segmentation, and legacy infrastructure decommissioning. The role will be responsible for reducing technical debt, strengthening network security controls, and ensuring compliance with organizational security policies and industry standards.

1. Firewall and ACL Governance

• Audit and Rationalization: Systematically review and audit existing firewall rule sets and Access Control Lists (ACLs) across the enterprise network to identify and eliminate redundant, outdated, or overly permissive rules.
• Policy Management: Develop, implement, and enforce standardized procedures for firewall and ACL modifications, ensuring all changes comply with established security policies and compliance requirements.
• Security Optimization: Identify opportunities to strengthen firewall configurations and minimize unnecessary network access.

2. Network Segmentation and Isolation

• Architectural Review: Evaluate and enhance network segmentation strategies, including micro-segmentation, to reduce the attack surface and prevent unauthorized lateral movement.
• Trust Zone Enforcement: Design and implement VLANs, routing policies, and network access controls to establish clear logical separation among different network environments, including user, administrative, research, and IoT networks.
• Zero Trust Implementation: Support the adoption of Zero Trust principles by enforcing least-privilege access and strengthening network isolation controls.

3. Legacy Infrastructure Decommissioning

• Network Cleanup: Identify and execute the systematic decommissioning of legacy network segments, unused VLANs, and obsolete hardware configurations.
• Infrastructure Migration: Lead remediation and consolidation initiatives for specialized network environments, transitioning legacy infrastructure to modern, standardized platforms.
• Technical Debt Reduction: Identify outdated configurations and redundant infrastructure components, developing and executing plans to improve network efficiency, security, and maintainability.

4. Documentation and Compliance

• Network Topology Management: Maintain accurate and up-to-date network topology diagrams, configuration records, and technical documentation covering security changes and segmentation designs.
• Security Compliance: Ensure network modernization and remediation activities align with internal information security policies, governance requirements, and applicable regulatory standards.
• Change Management: Document network changes, maintain configuration records, and support audit readiness through comprehensive technical documentation.

Required Skills and Qualifications

• Strong experience in enterprise networking and network security engineering.
• Hands-on experience with firewall rule management, ACL reviews, and security policy enforcement.
• Demonstrated knowledge of VLANs, routing, network segmentation, and micro-segmentation.
• Experience with network infrastructure modernization, legacy network decommissioning, and configuration cleanup.
• Understanding of Zero Trust architecture and least-privilege access principles.
• Experience creating and maintaining network topology diagrams and technical documentation.
• Knowledge of network security governance, compliance requirements, and change management procedures.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to work independently in a remote environment and collaborate with cross-functional infrastructure and security teams.