Our client, a growing financial firm in Mass. Is looking for a Network Security Engineer to join the team. This role will be responsible to design, implement and maintain the network security solutions to safeguard the firms information assets. This role will also implement and maintain network security groups, access controls and intrusion detection/prevention systems as well as monitor third-party security solutions.This is a five-days-a-week onsite position.

Responsibilities

1. Provide technical expertise in troubleshooting and resolving complex network security issues, ensuring minimal downtime.
2. Monitor network traffic for signs of security threats and respond promptly to incidents conducting root cause analysis and implementing corrective actions.
3. Plan and engineer solutions to solve existing threats and security issues, particularly, drive the remediation of any Security-related findings resulting from IT Audits and Client Examinations.
4. Conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential system vulnerabilities.
5. Maintain and manage Identity and Access controls, ensuring secure user and service account permissions and regularly review access controls to maintain a secure environment.
6. Stay abreast of emerging security threats, industry best practices, and latest advancements in network security technologies and processes.

Qualifications

1. Proven experience as a system network engineer or information security engineer with a focus on network security in the financial industry.
2. Strong knowledge of on-prem system administration, including Windows and Linux environments
3. Proficient in network protocols, routing, and switching technologies.
4. Proficient in cloud platforms such as AWS, Azure or Google Cloud Platform.
5. Experience with scripting languages such as PowerShell, Python or Bash
6. Strong understanding of firewall configurations, intrusion detection/prevention systems, VPNs, and other network security technologies.
7. Strong understanding of TCP/IP and IP addressing, LAN Technology including Ethernet and Ethernet switching, and routing fundamentals.
8. In-Depth knowledge of Identity Access Management technologies such as OKTA and protocols, such as Auth0, SAML and OpenID Connect.