The client is seeking an experienced Senior Network Security Engineer to implement and support the agency's IT network, cloud, and computing infrastructure. This role involves performing day-to-day activities related to securing VDOT's infrastructure, documenting processes, conducting research, analysis, design, and implementation of the client's network and computing-related infrastructure.
The Senior Network Security Engineer will support a hybrid enterprise environment consisting of approximately 300 statewide locations, Palo Alto firewalls, Azure networking, ExpressRoute connectivity, WAF technologies, Splunk SIEM, SD-WAN, and mission-critical public-facing applications. This role partners closely with Infrastructure, Cloud Engineering, and the Information Security Office to maintain the confidentiality, integrity, and availability of network infrastructure.
Key Responsibilities
- Ensure network security architecture aligns with operational security standards prior to and after deployment.
- Lead investigation and containment of network security incidents.
- Review firewall rule requests and ensure compliance with security standards.
- Design and maintain secure hybrid network architecture across on-premises and Azure environments.
- Monitor security events using SIEM technologies and coordinate incident response activities.
- Perform network security assessments and recommend remediation strategies.
- Develop and maintain network security standards, diagrams, and operational documentation.
- Support penetration testing and remediation efforts.
- Participate in on-call support during critical security incidents.
- Conduct proactive threat hunting and anomaly detection.
- Validate WAF and firewall placement and integration exposure/connectivity. Lead implementation, review, and management of agency WAF(s).
- Identify and diagnose system problems and threats using system logs, line monitors, SIEM, diagnostic software, and test equipment.
- Identify, prioritize, and remediate network security vulnerabilities.
- Provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls when required.
- Work independently on assigned projects.