Senior Network Security Engineer

Senior Network Security Engineer

We are seeking a highly skilled Senior Network Security Engineer to lead the architecture, implementation, and enhancement of secure network solutions that protect our systems and data. This role is critical in developing scalable, resilient, and secure infrastructure to defend against evolving cyber threats. If you excel at building robust security frameworks and thrive in a collaborative, forward-thinking environment, we want to hear from you. You will play a crucial role in ensuring a frictionless connection between technology and strategy within the organization. You will design secure network architectures, implementing new technologies and collaborating with other teams to architect solutions that enhance our resilience while supporting complex business operations in a high-profile environment. We are also looking for someone who enjoys mentoring younger team members in secure network design principles and operational excellence.

Salary range for this position is $100,000 to $125,000 per year, with salary level within this range commensurate with experience. Legislative Council Staff employees are not members of the state personnel system. Legislative Council Staff is committed to providing employees with a strong and competitive benefits package that supports you, your health, and your family.

Primary responsibilities in this position include:

• Network Security Architecture and Design
• Implementation of Security Controls
• Threat Monitoring and Incident Response
• Vulnerability Management
• Policy Development and Compliance
• Cloud and Hybrid Network Security
• Technology Evaluation and Integration
• Collaboration with Cross-Functional Teams
• Performance Optimization
• Mentorship and Leadership
• Documentation and Reporting
• Proactive Threat Prevention

Your educational background is a Bachelor’s degree from an accredited university or equivalent relevant technical and security experience in network development and system architecture. You should have 8-10+ years of overall network and systems security experience with a proven track record of re-architecting infrastructure and systems to improve security for the entire environment.

Required qualifications include:

• Minimum of 5 years of experience being responsible for network security
• Expertise in designing and deploying firewalls, VPNs, IDS/IPS, and network segmentation
• In-depth knowledge of network protocols (e.g., TCP/IP, BGP, OSPF) and encryption standards
• Relevant certifications such as CISSP, CCNP Security, or equivalent

Your technical knowledge and skills include:

• Networking Fundamentals: In-depth understanding of networking protocols (e.g., TCP/IP, BGP, OSPF, DNS, DHCP). Knowledge of routing, switching, and network segmentation.
• Network Security Technologies: Expertise in firewalls (e.g., Palo Alto, Fortinet). VPNs (e.g., IPsec, SSL), IDS/IPS, and Web Application Firewalls (WAF).
• Threat Mitigation Tools and Techniques: SIEM platforms (e.g., Splunk, or others). Vulnerability management tools (e.g., Nessus, Qualys). Endpoint detection and response (EDR) tools.
• Encryption and Authentication: Understanding of encryption protocols (e.g., TLS, IPSec, PKI). Implementation of multi-factor authentication (MFA) and single sign-on (SSO).
• Cloud and Hybrid Security: Security knowledge for AWS, Azure, and GCP environments. Familiarity with cloud-native security solutions (e.g., AWS Security Hub, Azure Sentinel).
• Compliance and Standards: Understanding of regulatory frameworks like CIS and NIST CSF.