Network Data & security

Network Data & Security Engineer

Roles and Responsibilities:

• Network Architecture & Design:

  Design, implement, and manage secure network architectures, including LAN, WAN, VPN, and cloud networking solutions, ensuring scalability, performance, and resilience.

• Network Security Implementation:

  Configure, deploy, and maintain various network security devices and solutions such as Next-Generation Firewalls (NGFW), Intrusion Detection/Prevention Systems (IDS/IPS), Web Application Firewalls (WAF), secure proxies, and VPN gateways.

• Data Protection in Transit:

  Implement and manage encryption protocols (e.g., IPsec, TLS/SSL) and secure tunneling mechanisms to protect data traversing the network.

• Data Loss Prevention (DLP):

  Design and implement network-based Data Loss Prevention (DLP) solutions to monitor, detect, and prevent sensitive data from leaving the organizational network.

• Access Control & Identity Management:

  Manage network access controls, user authentication, and authorization mechanisms, ensuring least privilege principles are applied across network devices and data access points.

• Security Monitoring & Incident Response:

  Continuously monitor network traffic and security logs for anomalies, threats, and potential data breaches. Participate in incident response activities related to network and data security incidents.

• Vulnerability Management:

  Conduct network vulnerability assessments, analyze findings, and implement remediation strategies to harden network infrastructure against known exploits and vulnerabilities.

• Compliance & Documentation:

  Ensure network configurations and data handling practices comply with industry standards and regulatory requirements. Create and maintain comprehensive documentation for network security architecture, configurations, and operational procedures.

• Troubleshooting:

  Perform advanced troubleshooting of complex network and data security issues, diagnosing connectivity problems, performance bottlenecks, and security incidents.

• Collaboration:

  Work closely with other IT teams (e.g., system administrators, application developers, cloud engineers) to integrate security into all network operations and new projects.

Preferred Candidate Profile:

• Networking Fundamentals:

  Strong knowledge of core networking concepts, including TCP/IP, routing protocols (BGP, OSPF), switching, VLANs, and network segmentation.

• Network Security Expertise:

  In-depth understanding and hands-on experience with various network security technologies (firewalls, VPNs, IDS/IPS, WAF, NAC).

• Data Security Concepts:

  Solid understanding of data security principles, including encryption at rest and in transit, data classification, and Data Loss Prevention (DLP).

• Cloud Networking & Security (Plus):

  Familiarity with cloud networking patterns and security services on major cloud platforms (AWS, Azure, GCP).

• Security Tools:

  Experience with network monitoring, security information and event management (SIEM) tools, and vulnerability scanning tools.

• Problem-Solving:

  Exceptional analytical and problem-solving skills with a proactive approach to identifying and mitigating network and data security risks.

• Scripting (Plus):

  Experience with scripting languages (e.g., Python, PowerShell) for network automation and security tasks.

• Communication:

  Excellent verbal and written communication skills to articulate complex technical concepts to both technical and non-technical audiences.

• Certifications (Plus):

  Industry certifications such as CCNA Security, CCNP Security, CISSP, CompTIA Security+, or CySA+ are highly desirable.

• Education:

  Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related engineering field.