Network Security Engineer

CTI Consulting • Foster City, CA

10d • Hybrid

About The Position

CTI Staffing is partnering with a leading technology organization to hire two Network Security Engineers for its Information Security team in Foster City, California. This is a hybrid, six-month contract-to-hire role requiring three days onsite per week. The team maintains network security systems and delivers scoped buildout projects, with the engineers performing hands-on implementation and support.

The engineers administer enterprise next-generation firewall and UTM platforms, URL filtering and Layer-7 inspection, IDS/IPS, 802.1X network access control, and remote access VPN. They work tickets to SLA, communicate updates to requesters, maintain operational documentation, and deliver scoped initiatives including an 802.1X expansion and segmentation with SSL decryption enforcement.

Success is measured by closing tickets to SLA with satisfied requesters, implementing changes without change-caused incidents, and delivering project milestones on agreed dates with complete handoff documentation.

Requirements

• At least 5 years of network security engineering experience supporting production environments.
• At least 5 years of IT systems or application engineering and administration experience.
• Strong working knowledge of all layers of the OSI model.
• Hands-on Layer-7 protection experience, including application control, TLS inspection, IPS, URL filtering, and DNS filtering.
• Direct experience administering enterprise NGFW/UTM platforms.
• Experience implementing and supporting 802.1X wired and wireless network access control.
• Experience with enterprise remote access VPN.
• Experience working within a formal change management process.
• Clear written and verbal communication skills across security, IT, product, and operations teams.

Nice To Haves

• Relevant certifications such as PCNSE, Security+, or CISSP.
• Scripting or automation experience for configuration and reporting, using tools such as Python, Ansible, or Terraform.
• Experience in a regulated or safety-critical environment.
• Experience with network segmentation and SSL decryption enforcement.
• Strong runbook and network diagram documentation habits.

Responsibilities

• Administer next-generation firewall and UTM platforms, including policy changes, rule cleanup, software and signature updates, and certificate renewals.
• Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling.
• Tune IDS/IPS signatures, reduce false positives, and escalate confirmed detections to the security operations team.
• Support 802.1X network access control, including troubleshooting supplicants, certificates, and policies, and onboarding new device types.
• Support remote access VPN, including client troubleshooting, access and split-tunnel policy changes, and availability monitoring.
• Work the ticket queue to SLA and provide clear written updates to requesters.
• Maintain runbooks, network diagrams, and configuration documentation.
• Deliver scoped projects, including an 802.1X expansion and segmentation with SSL decryption enforcement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed