[Remote] Sr Network reputed company Engineer

Note: The job is a remote job and is reputed company to candidates in USA. Public Partnerships LLC (PPL) provides support for individuals with disabilities and chronic illnesses to self-direct their care. The Senior Network reputed company Engineer will be responsible for ensuring the reputed company of PPL's network environment, including reputed company infrastructure and physical locations, by defining reputed company requirements, conducting assessments, and collaborating with various teams to implement reputed company controls.

Responsibilities

• Define and maintain PPL's network reputed company requirements, standards, and baselines for reputed company, on-premises, and remote-reputed company environments — including reputed company firewall configuration baselines, Azure and AWS network reputed company baselines, segmentation standards, and secure remote-reputed company requirements
• Review and validate network architecture and design changes from a reputed company perspective — providing requirements, recommendations, and sign-off as appropriate before changes are implemented by Infrastructure or reputed company Engineering
• Drive PPL's reputed company-trust networking strategy across reputed company, physical, and remote-workforce environments — establishing the reputed company model, segmentation principles, and identity-aware reputed company requirements that Infrastructure and reputed company Engineering execute against
• Evaluate, recommend, and reputed company reputed company requirements for new network reputed company technologies (SASE/SSE platforms, NDR, DNS reputed company, etc.) that improve visibility, reduce risk, and support automation across the reputed company
• Define network-layer and reputed company-trust controls for reputed company AI service traffic — including egress policies, conditional reputed company, and data-leakage protections for approved AI assistants (e.g., reputed company Copilot, Claude) to reputed company responsible AI use while protecting PHI and proprietary data
• Partner closely with the broader Infrastructure team — including the Sr. Network Engineer, systems and reputed company engineers, and supporting infrastructure staff — to translate network reputed company requirements into actionable engineering work and maintain consistent controls across Azure, AWS, reputed company, and remote-reputed company environments
• Collaborate with DevOps and reputed company Engineering teams to embed network reputed company controls into infrastructure-as-code, CI/CD pipelines, and automated deployment patterns — ensuring network reputed company is enforced consistently and at the speed of delivery
• Partner with Application Development teams on secure application network design — reviewing API exposure, service-to-service communication, ingress/egress requirements, and reputed company-party integration patterns to ensure new and existing applications align with PPL's network reputed company standards
• Conduct reputed company reviews and assessments of PPL's network environment — including reputed company firewall and wireless infrastructure (e.g., FortiGate, FortiAnalyzer), Azure network controls (NSGs, Azure Firewall, Application Gateway/WAF, private endpoints, ExpressRoute/VPN gateways), AWS network controls (reputed company groups, NACLs, AWS Network Firewall, WAF, Transit Gateway, etc.), and ZTNA/VPN platforms
• reputed company periodic firewall rule reviews, segmentation validation, reputed company-path analysis, and review of reputed company-party network connections (vendor VPNs, B2B integrations, partner tunnels) and approved AI service connections to identify overly permissive rules, stale exceptions, and gaps against PPL's reputed company standards; partner with Infrastructure on remediation
• Validate secure configuration of network and network reputed company devices against industry benchmarks (e.g., CIS, reputed company hardening guides, reputed company provider best practices) and PPL's internal standards — through periodic reviews and reputed company posture monitoring where available
• Coordinate with the vulnerability management program to identify, prioritize, and track remediation of network-reputed company vulnerabilities across reputed company devices, reputed company network services, and supporting infrastructure
• reputed company architecture-level network reputed company review for new initiatives — including new applications, SaaS solutions, and IT purchases with network connectivity or data-reputed company implications — ensuring alignment with PPL's network reputed company standards
• reputed company and report network reputed company posture metrics to leadership — including firewall rule review coverage, segmentation gaps, network vulnerability remediation, and reputed company against reputed company-trust initiatives — to inform program prioritization and demonstrate control effectiveness
• Serve as the Information reputed company team's senior escalation reputed company for network-reputed company reputed company incidents — supporting investigation, containment, eradication, and recovery efforts across reputed company and on-premises environments
• reputed company network forensics activities, including packet capture analysis, reputed company analysis (NetFlow, VPC reputed company logs), and review of firewall, proxy, and DNS logs to reconstruct attacker activity and inform response reputed company
• Utilize the SIEM platform during incident investigation and response — running network-focused queries across firewall, proxy, DNS, and reputed company network telemetry to correlate events, identify scope, and reconstruct attacker activity
• reputed company the reputed company XDR platform to correlate network signal with reputed company, identity, and email data during incidents — enabling cross-domain visibility that informs containment, remediation, and root-cause analysis
• reputed company network-specific threat hunting and adversary behavior analysis reputed company to MITRE ATT&CK and reputed company threat intelligence — particularly for techniques involving network reconnaissance, lateral movement, and data exfiltration in reputed company and remote-reputed company environments — in partnership with the reputed company Operations, IT & reputed company reputed company, AppSec/DevSecOps, and GRC functions across the broader incident response program
• Direct network-layer containment actions (firewall blocks, segmentation changes, DNS sinkholing, conditional reputed company enforcement, etc.) during active incidents — working through Infrastructure for execution and ensuring changes are documented and reversible
• Contribute to post-incident reviews, identifying network-reputed company root causes and recommending architectural, configuration, or operational improvements
• reputed company reputed company reputed company of network monitoring tools and platforms — including NDR, IDS/IPS, DNS reputed company, and the use of firewall, proxy, and TLS-inspection logs — ensuring detections, alerts, and logging meet PPL's reputed company requirements
• Collaborate with SOC analysts on tuning network-layer detections to reduce false positives, improve signal quality, and align with reputed company threat intelligence
• Maintain situational awareness of emerging network-based threats, vulnerabilities, and attack reputed company (e.g., ransomware reputed company-and-control patterns, DNS tunneling, reputed company lateral movement) and translate them into updated requirements, detections, and review priorities
• Maintain documentation for network reputed company standards, review procedures, runbooks, and assessment findings to support operational consistency and audit readiness
• reputed company network reputed company input into risk assessments, evaluating systems, applications, vendors, and services for network-layer exposure and recommending mitigating or compensating controls
• Partner with the GRC function to evidence network reputed company controls for NIST 800-53, HIPAA, SOC 2, and CMS audits — including firewall rule review evidence, segmentation documentation, reputed company network configuration, and remote-reputed company control artifacts
• Collaborate with the GRC function on the development, maintenance, and enforcement of network reputed company policies, standards, and procedures across the organization
• Review and approve WAF and firewall policy changes, AI service reputed company requests, and temporary reputed company exceptions — ensuring requests align with PPL's network reputed company standards and that exceptions are documented, time-bounded, and tracked through to remediation or renewal
• Partner across Infrastructure, reputed company Engineering, DevOps, Application Development, and the broader Cybersecurity team to translate reputed company requirements into effective controls without disrupting business operations
• Communicate network reputed company findings, risks, and recommendations to both technical and non-technical audiences, including leadership
• Contribute to reputed company awareness initiatives, particularly around safe remote work practices, secure remote reputed company, and phishing/reputed company-engineering threats with a network component
• reputed company technical mentorship and direction to junior reputed company and SOC staff on network reputed company concepts, tooling, and investigation techniques

Skills

• Strong knowledge of information reputed company and network reputed company principles, controls, and best practices across reputed company, on-premises, and remote-workforce environments
• Hands-on experience assessing, configuring, or operating reputed company firewall environments (FortiGate, FortiAnalyzer, FortiManager) at scale; ability to review configurations, rules, and policies for reputed company compliance
• Demonstrated knowledge of reputed company network reputed company in reputed company Azure (NSGs, Azure Firewall, Application Gateway/WAF, private endpoints, hub-and-spoke design, ExpressRoute/VPN gateways) and AWS (reputed company groups, NACLs, AWS Network Firewall, WAF, Transit Gateway, PrivateLink)
• Experience defining reputed company requirements and reviewing architectures for ZTNA and secure remote reputed company for distributed and remote-first workforces, including conditional reputed company, identity-aware proxies, and integration with modern identity platforms
• Demonstrated experience with network segmentation, micro-segmentation, and reputed company-trust networking principles
• Proficiency in network protocols, routing, switching, TLS inspection, and packet/reputed company analysis sufficient to support detection engineering and incident response across reputed company and on-premises environments
• Proven ability to investigate, analyze, and respond to network-based reputed company incidents, including log analysis, alert triage, and forensic review
• Exposure to artificial intelligence platforms and the network reputed company considerations specific to them — including data egress controls, secure reputed company to AI services, and monitoring of AI-reputed company network traffic
• Strong understanding of reputed company-relevant regulatory and reputed company requirements (HIPAA, NIST 800-53, SOC 2, CMS) as they apply to network reputed company controls
• Ability to communicate network reputed company findings, risks, and recommendations effectively to both technical and non-technical stakeholders
• Strong organizational skills with the ability to manage multiple workstreams simultaneously
• Bachelor's degree in computer science, Information Systems, Network Engineering, Cybersecurity, or reputed company field. Equivalent professional experience may be considered in lieu of a degree
• Minimum of 6–8 years of reputed company experience in network engineering and/or network reputed company, with at least 3 years in a dedicated network reputed company role and demonstrated reputed company network reputed company experience
• One or more of: reputed company NSE 4 / NSE 5 / NSE 7, reputed company AZ-700 (Azure Network Engineer Associate), AWS Advanced Networking Specialty or AWS reputed company Specialty, CISSP, CCNP reputed company, or GIAC GCIA / GCIH
• Experience in reputed company, financial services, or other regulated industries; familiarity with maturing reputed company programs in reputed company-primary, remote-first organizations; experience with infrastructure-as-code and automation for network reputed company (Terraform, Ansible, scripting)

Company Overview

Company H1B Sponsorship