Security Network Operations Engineer

Institution for Savings•Ipswich, MA

21d•$95,000 - $140,000

About The Position

The Institution for Savings is seeking a Security Network Operations Engineer to help secure and operate the Bank's multi-branch network and information systems. This role blends hands-on network engineering, with a strong emphasis on our Cisco Meraki cloud-managed environment spanning all branch and operations sites — with day-to-day security operations across our Palo Alto, Splunk, Darktrace, Netwrix, Ivanti, and Mimecast toolset. The engineer ensures the resiliency, performance, and security of the Bank's infrastructure while supporting the regulatory and audit obligations of a financial institution.

Requirements

Bachelor's degree in Computer Science, Information Technology, Networking, or a related field — or equivalent experience.
3–5+ years in network engineering and/or security operations, ideally in a multi-site environment.
Hands-on Cisco Meraki experience — deploying and managing MX/MS/MR across multiple sites via the cloud dashboard.
Strong networking fundamentals: TCP/IP, routing/switching, VLANs, DNS, DHCP, VPN, and wireless.
Experience administering next-gen firewalls (Palo Alto and/or Meraki MX), including policy, VPN, and threat prevention.
Working knowledge of SIEM, network/endpoint detection, and incident response.
Familiarity with defensive frameworks (MITRE ATT&CK, NIST, cyber kill chain).
Strong analytical, troubleshooting, documentation, and communication skills.

Nice To Haves

Cisco Meraki Solutions Specialist (ECMS / 500-220).
Security certifications: Security+, Comptia Security+, GCIH, PCNSE (Palo Alto), or SSCP.
Familiarity with Darktrace, Netwrix, Splunk, Mimecast, Veeam, or PRTG.
Meraki dashboard API experience.

Responsibilities

Work on the network team to design, deploy, configure, and maintain LAN/WAN and wireless infrastructure across all Institution for Savings branch, operations, and data center sites using the Cisco Meraki cloud dashboard (MX security appliances).
Work on the network team to manage inter-site connectivity, VPN tunnels, VLANs, routing, traffic shaping, and QoS across the Bank's distributed branch network.
Monitor network performance and capacity; review Meraki summary reporting, investigate anomalies (bandwidth spikes, high-usage clients), and resolve connectivity issues proactively.
Work on the network team to maintain network documentation, topology diagrams, configuration standards, and change records in line with Bank change-control procedures.
Work on the network team to plan and execute branch network upgrades, refreshes, and expansions with minimal disruption to banking operations.
Ensure all in-scope servers and workstations are assessed, patched, and verified on a consistent schedule using Ivanti Patch Management, reducing security exposure and maintaining compliance with the Bank's patch-management standards and examiner expectations.
Work on the network team to monitor and respond to alerts from the Bank's security stack — Splunk (SIEM), Darktrace (network detection / Antigena autonomous response), Palo Alto next-gen firewalls, Netwrix Auditor, and Mimecast email security.
Triage, investigate, contain, and remediate security events and incidents; document findings, perform root-cause analysis, and support post-incident review.
Administer and harden perimeter using AccessExpert security system and Alarms.
Support audit logging, threat hunting, and threat-intelligence review across the environment.
Support infrastructure monitoring (PRTG) escalations through the Bank's Freshservice ITSM workflow.
Contribute to evidence collection and reporting for FFIEC, GLBA, FDICIA, and examiner/audit requirements.
Partner with the Systems Engineering, Cyber Security, and Help Desk teams to embed security into daily operations.