Network & Infrastructure Security Engineer

Gleason•Rochester, NY

1d•$90,000 - $120,000

About The Position

Gleason Corporation is seeking an experienced, hands-on network and infrastructure security engineer to own the operational security, reliability, and continuous improvement of networks across multiple company locations. The role emphasizes network engineering and defensive security, with responsibility for firewalls, secure connectivity, network segmentation, switching, wireless, and protection of internet-facing infrastructure. The engineer will work with Corporate IT and local IT teams to identify weaknesses, establish consistent technical standards, and resolve complex incidents. The position serves as a technical expert and escalation resource for network and security operations. It involves administering and securing network infrastructure, managing vulnerability remediation and changes to production devices, investigating incidents, maintaining documentation and recovery practices, and guiding IT personnel across locations. Success includes hardened and patched internet-facing devices, regularly reviewed firewall and VPN access, consistent site standards, documented remediation, and safe restoration and prevention of service disruptions.

Requirements

3–5 years of hands-on enterprise network administration or engineering experience, including direct responsibility for firewall security and multi-site connectivity.
Ability to configure, troubleshoot, and secure at least one major next-generation firewall platform, and to learn and support additional platforms.
Strong skills in TCP/IP, routing, VLANs, ACLs, VPN/IPsec, switching, wireless, DNS, DHCP, and network troubleshooting.
Experience managing security patches, firmware upgrades, vulnerability remediation, and change control on production network devices.
Ability to investigate issues using logs, packet captures, traffic analysis, diagnostic tools, and a structured root-cause methodology.
Practical understanding of attack paths, exposed services, credential-based attacks, segmentation, least privilege, and defense in depth.
Clear documentation, sound risk judgment, and ability to coordinate with distributed IT staff and business stakeholders.
Ability to independently investigate complex security incidents using firewall logs, packet captures, and network traffic analysis.
Experience implementing secure administrative access, privileged access controls, and network management security best practices.
Ability to lead technical projects, make architecture recommendations, and serve as an escalation resource for network and security operations.

Nice To Haves

Experience with Palo Alto, SonicWall, Sophos, and Fortinet platforms.
Experience managing enterprise Wi-Fi and switches.
Experience with hybrid Active Directory/Entra ID environments.
Experience integrating endpoint detection and response.
Experience with CrowdStrike vulnerability scanning and SIEM/log monitoring.
Experience with manufacturing or operational technology (OT) segmentation.
Experience with high availability, disaster recovery, and business continuity design.
Relevant vendor certifications such as PCNSE, NSE/FCP/FCSS, CCNP, or equivalent; demonstrated hands-on ability is valued more than credentials.

Responsibilities

Administer, harden, monitor, and troubleshoot next-generation firewalls and perimeter services, including rule bases, NAT, IPS/IDS, remote access, VPNs, firmware, certificates, and secure management access.
Maintain an accurate inventory of network and security devices; track advisories, exposed services, end-of-life systems, configuration drift, and vulnerabilities; coordinate and validate remediation and document exceptions.
Design and maintain VLANs, ACLs, inter-VLAN controls, least-privilege access, site-to-site connectivity, and segmentation for user, server, guest, management, and higher-risk networks.
Configure and troubleshoot managed switches, routing, DNS/DHCP dependencies, wireless controllers and access points, authentication, and network performance.
Review network telemetry and alerts, investigate suspicious traffic and attempted intrusions, support incident containment, validate configuration backups, and test recovery procedures.
Conduct regular site security reviews and maintain network diagrams, configurations, change records, runbooks, and remediation plans.
Coordinate network changes with local IT teams and maintain common corporate security baselines across locations.
Act as a technical escalation point for complex network and security issues; provide technical guidance to IT personnel across locations.
Establish engineering standards and lead initiatives to improve enterprise infrastructure security and reliability.
Independently diagnose technical causes of outages or suspicious events, restore service safely, and help prevent recurrence.