Description

You will design, secure, and maintain hybrid network architectures across on-premises and Azure environments.

This role is hybrid.

Responsibilities

• Lead investigation, containment, and remediation of network security incidents and vulnerabilities.
• Design and maintain secure hybrid network architecture, including WAF placement and firewall integration.
• Review firewall rule requests, validate compliance with security standards, and manage agency WAFs.
• Conduct proactive threat hunting, anomaly detection, and security assessments using SIEM tools.
• Develop and maintain network security standards, topology diagrams, and operational documentation.

Required Skills

• 8+ years in enterprise networking and security, with 3+ years in Azure Networking.
• Strong experience with WAF/NGFW technologies (Palo Alto, F5 Distributed Cloud, Azure WAF, F5 BIG-IP).
• Proficiency in SIEM products for log analysis and incident response (Splunk, Microsoft Sentinel).
• Hands-on experience with vulnerability scanning and remediation tracking (Nessus, Tenable).
• Deep knowledge of security frameworks: NIST CSF, NIST 800-53, CIS Benchmarks, and Zero Trust principles.
• Experience with identity and access management: Active Directory, MFA, Conditional Access, Certificates, Cisco ISE, NAC, 82.1X, RADIUS, TACACS.
• Ability to work independently on assigned projects and provide clear technical documentation.

Preferred Skills

• Azure Security Engineer (AZ-500) or Azure Network Engineer (AZ-700) certification.
• Experience supporting environments with 300+ network devices.
• Ability to mentor junior engineers and communicate technical issues to executive audiences.

Key Skills

Education

Bachelor's degree