Security Engineer – Network & Infrastructure Security

Amplity is hiring a Security Engineer to support and improve security controls across its network, cloud, identity, endpoint and SaaS environments. The role owns network security technologies and secure connectivity while investigating issues, implementing controls and collaborating with Infrastructure, DevOps and IT teams.

Responsibilities:

• Take technical ownership of network security controls, including next-generation firewalls, firewall policies, VPNs, network segmentation and secure connectivity
• Manage and maintain firewall rulesets, including rule creation, review, optimization and removal of unnecessary or obsolete access
• Troubleshoot network and firewall issues across corporate, cloud and remote-access environments
• Support the design and implementation of secure network architectures, including segmentation and least-privilege connectivity
• Review network traffic, logs and security events to identify suspicious activity and assist with investigations
• Assess security implications of new network connections, third-party integrations and infrastructure changes
• Work with Infrastructure and DevOps teams to ensure security is incorporated into network and cloud architecture
• Follow formal change management processes for network and firewall changes, including obtaining required approvals, testing changes before implementation, documenting rollback plans, and performing post-change validation to confirm security controls and connectivity function as intended
• Maintain appropriate documentation covering network security architecture, firewall configurations and operational procedures
• Manage and improve security technologies across endpoint, cloud, identity, email and network environments
• Investigate security alerts and provide technical support during security incidents
• Identify vulnerabilities and configuration weaknesses and work with technology owners through remediation
• Implement security controls based on risk, security standards and organizational requirements
• Support security monitoring and detection capabilities and help improve visibility across the technology environment
• Participate in vulnerability management, security assessments and remediation activities
• Support security elements of technology projects, migrations and integrations
• Assist with security evidence and technical controls supporting frameworks such as SOC 2, CIS Controls and ISO 27001-aligned practices
• Contribute to continuous improvement of security tooling, processes and automation

Requirements:

• strong expertise in network security, firewall technologies, and secure infrastructure
• strong networking fundamentals with practical security engineering experience
• Enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, NAT and VLANs
• Enterprise firewall administration and troubleshooting
• Firewall policies, network segmentation and access-control design
• Site-to-site and remote-access VPN technologies
• Analyzing network traffic and logs to troubleshoot connectivity and security issues
• Network security architecture and secure connectivity
• Cloud networking and security, ideally within Microsoft Azure
• Security incident investigation and troubleshooting
• Vulnerability management and remediation
• Working within a modern Microsoft enterprise environment
• Strong technical troubleshooting skills with the ability to work methodically across network, infrastructure and security layers
• Comfortable taking ownership of technical issues from investigation through resolution
• Able to balance security requirements against operational and business needs
• Strong understanding of least privilege, defense in depth and Zero Trust principles
• Able to communicate technical risks clearly to both technical and non-technical stakeholders
• Comfortable working independently while collaborating closely with Infrastructure, DevOps and other IT teams
• Curious and willing to learn technologies outside their immediate area of expertise
• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical work experience)
• 5+ years of hands-on experience in systems administration, network infrastructure, or enterprise IT operations
• Palo Alto Networks, Fortinet, Cisco or similar next-generation firewall platforms
• Microsoft Azure networking, including VNets, NSGs, routing and private connectivity
• Microsoft Entra ID
• Microsoft Intune
• Microsoft Defender
• Netskope or other SSE/SASE technologies
• SIEM and security monitoring platforms
• EDR/XDR technologies
• Infrastructure-as-Code or automation, such as PowerShell, Python or Terraform
• Security within DevOps or CI/CD environments
• Cloud security posture management
• SOC 2, CIS Controls, NIST CSF or ISO 27001 environments
• Relevant industry experience isations more important than specific certifications, although certifications such as the following would be beneficial:
• Palo Alto PCNSA/PCNSE
• Fortinet FCP/FCSS
• Cisco CCNA/CCNP
• Microsoft AZ-500
• Microsoft SC-200 / SC-300
• CompTIA Security+