IT Network Security Engineer

The IT Network Security Engineer is responsible for designing, implementing, and maintaining the organization's firewall and network infrastructure while strengthening overall cybersecurity practices. This role ensures that the company's networks, systems, users, and applications are secure against evolving threats. The IT Network Security Engineer collaborates with internal IT teams and external partners to maintain compliance with security frameworks, monitor vulnerabilities, implement network systems, and lead incident response efforts.

Essential Duties and Responsibilities

Firewall and Network Security

• Design, implement, and manage firewall systems in alignment with industry standards.
• Monitor, maintain, and troubleshoot firewall health and traffic flow.
• Support IT teams with firewall rule changes and modifications.
• Manage relationships with security vendors, consultants, and managed service providers (MSPs).
• Document firewall solutions and provide training to IT staff.
• Ensure firewall policies comply with security standards and frameworks.
• Maintain the network, including BGP routing

Security System and Compliance

• Implement and maintain intrusion detection and response (IDR) systems.
• Sustain automation tools to detect, prevent, and remediate security threats.
• Validate the effectiveness of network security controls.
• Support compliance with PCI, NIST, and other regulatory frameworks.
• Conduct vulnerability assessments and recommend mitigation strategies.
• Collaborate with vendors and consultants to strengthen security posture.
• Promote security awareness and coach teams on best practices.

Threat and Incident Management

• Lead efforts to reduce the organization's attack surface through proactive security improvements.
• Partner with end-user support teams to identify and mitigate risks.
• Maintain patch management schedules for all infrastructure systems.
• Track active threats and develop mitigation strategies.
• Lead Security Incident Response (SIR) efforts and post-incident reviews.
• Coordinate implementation of post-mortem action items.

Reporting and Performance Monitoring

• Define and track key performance indicators (KPIs) for network and security infrastructure.
• Report on service performance and emerging security needs on a weekly, monthly, and quarterly basis.

Other Duties

This job description is intended to outline the general nature and key responsibilities of the role. It is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position. Duties and responsibilities may evolve or change over time based on business needs, without advance notice.

Education and Experience

• Bachelor's degree in Information Technology, Cybersecurity, or related field; CISSP or equivalent certification preferred.
• Minimum of 3 years of experience as a Systems Administrator (Windows and Linux preferred).
• 3+ years of experience with scripting (PowerShell preferred).
• SASE and NG Firewall experience preferred.
• Strong knowledge of TCP/IP networking and application-level security.
• Proven ability to debug and resolve system/network issues.
• Experience with automation and management tools.
• Familiarity with ITIL processes for Change and Incident Management.
• Demonstrated experience leading technical projects in a security-focused environment.

Physical Requirements / Work Environment

The physical demands required to perform the essential responsibilities of this position are as follows. Reasonable accommodations, if necessary and/or as required by law, will be made available.

• Regularly required to sit, use hands, talk, and hear; occasionally lift up to 20 pounds.
• Requires close vision and extended use of a computer.
• Regular use of standard office equipment (computer, copier, phone, etc.).
• This role operates in a standard office environment.

EEOC Statement

Batteries Plus is an Equal Opportunity Employer. Applicants and associates are free from discrimination on the basis of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, pregnancy accommodations, reprisal, other non-merit based factors, and any other protections afforded under state or local laws.