Network & Infrastructure Security Engineer

Gleason•Rochester, NY

About The Position

We are seeking an experienced, hands-on network and infrastructure security engineer to own the operational security, reliability, and continuous improvement of networks across multiple company locations. The role is primarily focused on network engineering and defensive security rather than policy-only cybersecurity. The engineer will be the resident technical expert for firewalls, secure connectivity, network segmentation, switching, wireless, and protection of internet-facing infrastructure, working with Corporate IT and local IT teams to identify weaknesses, establish consistent technical standards, and resolve complex incidents. The position owns firewall and perimeter security, vulnerability and patch management, segmentation and secure architecture, switching and wireless operations, detection and response, and multi-site standards. It also serves as a technical escalation point, provides guidance to IT personnel across locations, and leads initiatives to improve enterprise infrastructure security and reliability. Success means internet-facing devices are inventoried, hardened, monitored, and patched to risk-based targets; firewall rules and VPN access are regularly reviewed; sites follow consistent security and change-control standards; high-risk findings have clear remediation ownership; and outages or suspicious events are diagnosed, safely resolved, and prevented from recurring.

Requirements

3–5 years of hands-on enterprise network administration or engineering, including direct responsibility for firewall security and multi-site connectivity.
Proven ability to configure, troubleshoot, and secure at least one major next-generation firewall platform, with the ability to learn and support additional platforms.
Strong TCP/IP, routing, VLAN, ACL, VPN/IPsec, switching, wireless, DNS, DHCP, and network troubleshooting skills.
Experience managing security patches, firmware upgrades, vulnerability remediation, and change control on production network devices.
Ability to investigate issues using logs, packet captures, traffic analysis, and a structured root-cause methodology.
Practical understanding of attack paths, exposed services, credential-based attacks, segmentation, least privilege, and defense in depth.
Clear documentation, sound risk judgment, and ability to coordinate with distributed IT staff and business stakeholders.
Ability to independently investigate complex security incidents using firewall logs, packet captures, network traffic analysis, and other diagnostic tools.
Experience implementing secure administrative access, privileged access controls, and network management security best practices.
Ability to lead technical projects, make architecture recommendations, and serve as an escalation resource for network and security operations.

Nice To Haves

Experience with Palo Alto, SonicWall, Sophos, and Fortinet.
Enterprise Wi-Fi and switch management experience.
Experience with hybrid Active Directory/Entra ID environments.
Endpoint detection and response integration experience.
CrowdStrike vulnerability scanning and SIEM/log monitoring experience.
Manufacturing or operational technology (OT) segmentation experience.
Experience with high availability, disaster recovery, and business continuity design.
Relevant vendor certifications, such as PCNSE, NSE/FCP/FCSS, CCNP, or equivalent; demonstrated hands-on ability is valued more than credentials.

Responsibilities

Administer, harden, monitor, and troubleshoot next-generation firewalls and edge services, including rule bases, NAT, IPS/IDS, remote access, VPNs, firmware, certificates, and secure management access.
Maintain an accurate inventory of network and security devices; track vendor advisories, exposed services, end-of-life systems, configuration drift, and vulnerabilities.
Prioritize and coordinate firmware and security updates, validate remediation, and document exceptions.
Design and maintain VLANs, ACLs, inter-VLAN controls, least-privilege access, site-to-site connectivity, and segmentation of user, server, guest, management, and other higher-risk networks.
Configure and troubleshoot managed switches, routing, DNS/DHCP dependencies, wireless controllers and access points, authentication, and network performance.
Review firewall and network telemetry and alerts; investigate suspicious traffic and attempted intrusions; support incident containment; validate device-configuration backups; and test recovery procedures.
Conduct regular site security reviews and maintain network diagrams, configurations, change records, runbooks, and remediation plans.
Coordinate changes with local IT teams while ensuring common corporate security baselines.
Serve as a technical escalation point for complex network and security issues, provide technical guidance to IT personnel across locations, establish engineering standards, and lead infrastructure security and reliability improvements.
Investigate complex security incidents using firewall logs, packet captures, network traffic analysis, and other diagnostic tools.
Implement secure administrative access, privileged access controls, and network management security best practices.
Lead technical projects and make architecture recommendations.