Security Engineer III

The Network & Security Engineer is responsible for ensuring the availability, security, and integrity of the HMGMA network computing environment. This role designs, implements, maintains, and secures LAN/WAN, wireless, voice, and security infrastructures while defending against internal and external threats. The engineer applies a Defense-in-Depth security strategy to protect systems and data, ensures reliable network performance, and supports business continuity through disaster recovery, backup, and change management practices.

Responsibilities

Network & Infrastructure Management: Install, configure, and maintain LAN/WAN infrastructure including Cisco routers, switches, firewalls, VPNs, VLANs, VoIP phone systems, cabling, and wireless networks to ensure optimal performance, availability, and reliability.; Security Operations & Incident Response: Implement and administer security systems such as Cisco firewalls, Cisco ISE, StealthWatch IPS, and Wireless Intrusion Prevention Solutions; monitor, analyze, and respond to security threats and incidents using Defense-in-Depth principles.; Monitoring, Troubleshooting & Support: Detect, diagnose, and resolve network performance, health, and security issues; manage and respond to ServiceNow tickets while troubleshooting complex LAN/WAN and connectivity problems.; Change Management & Documentation: Ensure all change management, security policies, and procedures are followed; document network configurations, procedures, and system changes to support operational consistency and audits.; Business Continuity & Resilience: Perform disaster recovery planning and execution, including backup and restoration of network systems and devices; develop and test technical solutions to improve reliability, security, and scalability.

Requirements

Bachelor’s degree in Computer Science, Information Science, or a related field or equivalent hands‑on experience; 3–5 years of directly related experience supporting enterprise network and security environments; Strong experience with network security technologies, including firewalls, IPS, web filtering, endpoint security, and network defense strategies; Experience with Palo Alto F/W (PA-3435); Experience with ForcePoint (Webfilter); Experience with Rapid7 (VMS: Vulnerability Management Solution) or any VMS; Hands‑on expertise with Cisco ASA Firewalls (required), along with Cisco Catalyst and Nexus hardware; Proficiency with Cisco IOS and NX‑OS, including configuration, troubleshooting, and maintenance

Nice to have

Familiarity with A10 Load Balancers, Riverbed equipment, and Cisco DNA; Experience with Audit big PLUS; Industry security certifications (preferred but not required); CCNP Routing & Switching, CCNP Wireless, and/or CCNP Voice certifications; Prior experience interacting with both internal stakeholders and external customers in a professional, service‑oriented manner

Benefits

low cost health insurance; significant paid time off; comprehensive medical/dental coverage; generous PTO; education assistance; annual merit increase eligibility