Network & Security Infrastructure Engineer

ECS is seeking a Network & Security Infrastructure Engineer for its cybersecurity department. The role will lead the re-architecture of a VMware ESXi environment to support firewall and VLAN-based network segmentation, while administering enterprise firewall platforms and supporting Cisco and Aruba network infrastructure from a security-focused perspective.

Responsibilities:

• Hands-on experience designing and re-architecting VMware ESXi environments in an enterprise setting
• Ability to plan and implement VLAN segmentation strategies within virtualized infrastructure to support firewall enforcement and proper traffic isolation
• Experience configuring virtual switches, distributed switches, and virtual port groups in support of security segmentation objectives
• Familiarity with NSX or equivalent software-defined networking (SDN) platforms as they relate to micro-segmentation and east-west traffic control
• Ability to document virtual network architecture clearly and thoroughly, including design decisions, configurations, and future-state plans
• Hands-on experience configuring and administering enterprise-class firewall technologies, with specific experience on Check Point and Palo Alto platforms
• Ability to implement new firewall architectures, upgrades, and feature rollouts as directed
• Experience administering firewall policy including updates, upgrades, policy administration, and validation
• Proficiency managing and tuning software blades and associated security features such as IPS, URL filtering, Application Control, antivirus, and advanced malware detection
• Ability to review and implement changes consistent with existing firewall policies while maintaining thorough, up-to-date documentation
• Strong knowledge of firewall rules, security policies, and security operations within a large enterprise environment
• Willingness to work outside of normal business hours when required to support outage resolution or planned maintenance
• Strong hands-on experience with Cisco network infrastructure including routing, switching, and network security configurations in an enterprise setting
• Experience supporting and securing Aruba wireless access point environments
• Solid understanding of core networking protocols including TCP/IP, BGP, OSPF, VLANs, and VPNs
• Ability to monitor and analyze network architecture, communication flows, policies, and protocols from a cybersecurity perspective
• Experience identifying and isolating network-based security issues quickly during incidents and outages
• Familiarity with network access control concepts and how they integrate with broader security operations
• Ability to collaborate across teams including cybersecurity, systems administration, and technology support partners
• Experience supporting security continuous monitoring efforts such as risk assessments, vulnerability identification, and patch coordination
• Ability to create and maintain clear, accurate documentation for virtual, network, and firewall configurations, procedures, and troubleshooting steps
• Comfortable communicating technical findings and infrastructure risk clearly to both technical peers and senior leadership

Requirements:

• • Hands-on experience designing and re-architecting VMware ESXi environments in an enterprise setting
• • Ability to plan and implement VLAN segmentation strategies within virtualized infrastructure to support firewall enforcement and proper traffic isolation
• • Experience configuring virtual switches, distributed switches, and virtual port groups in support of security segmentation objectives
• • Familiarity with NSX or equivalent software-defined networking (SDN) platforms as they relate to micro-segmentation and east-west traffic control
• • Ability to document virtual network architecture clearly and thoroughly, including design decisions, configurations, and future-state plans
• • Hands-on experience configuring and administering enterprise-class firewall technologies, with specific experience on Check Point and Palo Alto platforms
• • Ability to implement new firewall architectures, upgrades, and feature rollouts as directed
• • Experience administering firewall policy including updates, upgrades, policy administration, and validation
• • Proficiency managing and tuning software blades and associated security features such as IPS, URL filtering, Application Control, antivirus, and advanced malware detection
• • Ability to review and implement changes consistent with existing firewall policies while maintaining thorough, up-to-date documentation
• • Strong knowledge of firewall rules, security policies, and security operations within a large enterprise environment
• • Willingness to work outside of normal business hours when required to support outage resolution or planned maintenance
• • Strong hands-on experience with Cisco network infrastructure including routing, switching, and network security configurations in an enterprise setting
• • Experience supporting and securing Aruba wireless access point environments
• • Solid understanding of core networking protocols including TCP/IP, BGP, OSPF, VLANs, and VPNs
• • Ability to monitor and analyze network architecture, communication flows, policies, and protocols from a cybersecurity perspective
• • Experience identifying and isolating network-based security issues quickly during incidents and outages
• • Familiarity with network access control concepts and how they integrate with broader security operations
• • Ability to collaborate across teams including cybersecurity, systems administration, and technology support partners
• • Experience supporting security continuous monitoring efforts such as risk assessments, vulnerability identification, and patch coordination
• • Ability to create and maintain clear, accurate documentation for virtual, network, and firewall configurations, procedures, and troubleshooting steps
• • Comfortable communicating technical findings and infrastructure risk clearly to both technical peers and senior leadership
• A minimum of 5+ years of experience in network security engineering or a closely related infrastructure discipline is required
• direct hands-on experience on both Check Point and Palo Alto platforms strongly preferred
• Candidates who bring demonstrated experience with VMware ESXi re-architecture and VLAN segmentation design — in addition to enterprise networking and firewall administration — will be given strong preference over candidates with depth in only one or two of these areas