Network Security Engineer

Gruve•Edison, NJ

7d•$80,000 - $150,000•Onsite

About The Position

The Network Security Engineer joins Gruve’s US Solutions Delivery team to implement and support enterprise firewall and network security solutions across customer environments. This hands-on, delivery-focused role centers on Cisco ASA and FTD platforms and next-generation firewall (NGFW) deployments. The engineer owns assigned workstreams end-to-end, from lab validation through production cutover, and works closely with architects, project managers, and customer stakeholders. U.S. citizenship and willingness to travel are required. The role is full-time and on-site in Edison, New Jersey. Gruve does not provide visa sponsorship. Gruve is an early-stage software services startup focused on helping enterprises use AI and data to make more informed business decisions. Its services include cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as large language models. The company describes its culture as innovative, collaborative, and focused on continuous learning, diversity, and inclusion.

Requirements

U.S. citizenship; Gruve does not provide visa sponsorship.
Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
4–7 years of cybersecurity experience, with a strong focus on firewall design and implementation.
At least 3 years of hands-on experience designing and implementing Cisco ASA and Cisco FTD firewall environments, or experience with third-party firewalls such as Palo Alto, Fortinet, or Check Point alongside limited Cisco firewall experience.
Proven expertise troubleshooting firewall and VPN connectivity issues, including NAT, routing, and policy-related problems.
Strong understanding of core networking concepts, including TCP/IP, DNS, DHCP, subnetting, NAT, VPNs, and routing and switching fundamentals.
Willingness to travel across the U.S. to support customer deployments and firewall rollouts.

Nice To Haves

CCNP Security certification or equivalent demonstrated expertise.
Experience with Cisco Secure Access, Umbrella, or XDR platforms.
Knowledge of Zero Trust or SASE implementations.
Knowledge of Cisco ISE for NAC/802.1X integration alongside firewall deployments.
Experience with security automation and scripting, including Python, Ansible, or APIs.
CISSP, GIAC, or other industry-recognized security certifications.
Familiarity with compliance frameworks such as PCI-DSS, HIPAA, SOC 2, and NIST.
Prior experience in a consulting, professional services, or partner-led delivery model.
Hands-on experience with NGFW features such as malware protection, threat detection, URL filtering, SSL decryption, and intrusion prevention systems (IPS).

Responsibilities

Implement and configure enterprise firewall and network security solutions, including NGFW/FTD, VPNs, NAT, NAC/ISE, and SASE, in alignment with approved designs.
Manage and maintain firewall policies, including access rules, NAT, objects, zones, and security profiles, following best practices.
Test and validate firewall rules and security configurations in lab or staging environments before production deployment.
Support migrations from Cisco ASA and third-party firewall platforms to Cisco FTD.
Troubleshoot and resolve firewall and network security issues, including traffic drops, NAT issues, VPN failures, and routing, DNS, or DHCP dependencies.
Identify and implement opportunities for optimization and automation, such as rule cleanup, standardization, and workflow improvements.
Collaborate with architects, senior engineers, and project managers to support accurate and timely solution delivery.
Participate in project sync-ups and technical discussions to understand requirements, scope, and deployment sequencing.
Own assigned tasks end-to-end, including escalation, root cause analysis, and issue resolution.
Create and maintain documentation, including firewall rules, network diagrams, VPN inventories, and operational runbooks.
Stay current on firewall platforms, SASE, Zero Trust, and network security practices, applying new learning to delivery work.
Travel across the U.S. to support customer deployments and firewall rollouts.