Network Security Engineer

CTI Consulting

6d • Hybrid

About The Position

CTI Staffing is partnering with a leading technology organization to hire two Network Security Engineers for its Information Security team in Foster City, California. The position is hybrid, with three days a week onsite, and is a six-month contract-to-hire. The team maintains network security systems and delivers scoped buildout projects; the engineers perform hands-on administration and implementation.

The engineers administer enterprise next-generation firewall and UTM platforms, operate URL filtering and Layer-7 inspection policies, tune IDS/IPS signatures, support 802.1X network access control and remote-access VPN, and handle service tickets to SLA. They maintain runbooks, network diagrams, and configuration documentation, and deliver scoped projects including an 802.1X expansion and segmentation with SSL decryption enforcement.

Success is measured by closing tickets to SLA with satisfied requesters, implementing changes without change-caused incidents, and meeting project milestones with complete documentation at handoff.

Requirements

• At least 5 years of network security engineering supporting production environments.
• At least 5 years of IT systems or application engineering and administration.
• Strong working knowledge of all layers of the OSI model.
• Hands-on Layer-7 protection experience, including application control, TLS inspection, IPS, URL filtering, and DNS filtering.
• Direct experience administering enterprise NGFW/UTM platforms.
• Experience implementing and supporting wired and wireless 802.1X NAC.
• Experience with enterprise remote-access VPN.
• Experience working within a formal change management process.
• Clear written and verbal communication across security, IT, product, and operations teams.

Nice To Haves

• Relevant certifications such as PCNSE, Security+, or CISSP.
• Scripting or automation experience for configuration and reporting, using Python, Ansible, or Terraform.
• Experience in a regulated or safety-critical environment.
• Experience with network segmentation and SSL decryption enforcement.
• Strong runbook and network diagram documentation habits.

Responsibilities

• Administer next-generation firewall and UTM platforms, including policy changes, rule cleanup, software and signature updates, and certificate renewals.
• Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling.
• Tune IDS/IPS signatures, reduce false positives, and escalate confirmed detections to the security operations team.
• Support 802.1X network access control, including supplicant, certificate, and policy troubleshooting and onboarding new device types.
• Support remote-access VPN, including client troubleshooting, access and split-tunnel policy changes, and availability monitoring.
• Work the ticket queue to SLA and provide clear written updates to requesters.
• Maintain runbooks, network diagrams, and configuration documentation.
• Deliver scoped projects, including an 802.1X expansion and segmentation with SSL decryption enforcement.
• Coordinate across security, IT, product, and operations teams and follow formal change management processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed