Network Security Engineer at Georgia System Operations Corporation in Tucker, GA, USA

Job description

• Engineer Secure, Resilient Network Services That Support Mission-Critical Operations
• Georgia System Operations Corporation (GSOC) is seeking a Network Security Engineer to design, implement, secure, and operate corporate network services and cybersecurity tools that enable reliable, protected business operations.
• This hands-on role combines enterprise network engineering and cybersecurity expertise across datacenter, campus, remote-site, internet-edge, and approved cloud environments. The Network Security Engineer helps safeguard availability, performance, secure access, and security visibility while advancing resilient, supportable, and automated network and security services.
• This opportunity is ideal for an experienced network and security professional who enjoys solving complex technical problems, strengthening controls, supporting incident response, mentoring peers, and collaborating across infrastructure, cybersecurity, application, service desk, and vendor teams.
• This is an onsite position and it is not eligible for visa sponsorship
• At GSOC, you will help engineer the network and security services that enable dependable business operations, secure access, security visibility, and resilient enterprise technology.
• You'll collaborate across infrastructure, cybersecurity, applications, service desk, and vendor teams while expanding your technical leadership and automation capabilities.

Responsibilities

• As a Network Security Engineer, you will engineer and support the network and network-focused security services that connect and protect enterprise users, systems, and sites.
• Design, deploy, and support datacenter and campus switching, routing, VLANs, VRFs, high availability, capacity planning, and network segmentation.
• Administer next-generation firewalls, security zones, NAT, threat-prevention services, firewall policy lifecycle, and least-privilege access controls.
• Engineer WAN, internet-edge, remote-site, remote-access VPN, and site-to-site VPN connectivity, including integrations with identity, MFA, and device-trust services.
• Design and support corporate and guest wireless, controllers, access points, RF performance, 802.1X, network access control, device profiling, and secure authentication.
• Configure load balancers, virtual servers, pools, health monitors, persistence, TLS termination, and high-availability services.
• Manage the network-facing certificate lifecycle and PKI integrations.
• Engineer and operate secure web and DNS controls, network detection and response, security logging, SIEM integrations, and security-control health monitoring.
• Partner with the Security Operations Center on alert tuning, investigations, evidence gathering, and operational security use cases.
• Support secure DNS, DHCP, and IP address management and maintain telemetry, flow data, logging, alerting, packet analysis, and service dashboards.
• Maintain secure configuration baselines, backups, firmware and software lifecycle, and remediation of network-device and security-tool vulnerabilities.
• Automate repeatable work using APIs, scripting, and infrastructure-as-code practices.
• Develop and test network and security-platform recovery and failover capabilities.
• Prepare change and rollback plans and provide incident escalation, containment support, root-cause analysis, and vendor coordination.
• Works independently within established standards and change processes.
• Provides technical leadership for projects and mentors peers.
• Participates in technology evaluations, proof-of-concepts, cross-functional initiatives, backup support, and knowledge transfer.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.
• Ideally 5+ years of progressive experience supporting enterprise network and network-security infrastructure, including switching, routing, firewall administration, VPN, wireless, and troubleshooting.
• Strong knowledge of enterprise LAN/WAN, datacenter switching, routing, firewalls, VPN, wireless, NAC, load balancing, PKI and certificates, DNS, DHCP, IPAM, and secure configuration management.
• Hands-on experience operating cybersecurity tooling such as secure web and DNS services, network detection and response, vulnerability management, SIEM and logging integrations, and security monitoring.
• Experience with network and security automation using Python, PowerShell, Ansible, Terraform, APIs, or comparable tools.
• Working knowledge of NIST CSF, CIS Controls, incident-response practices, and applicable regulatory or industry requirements, including NERC CIP where relevant to the IT environment.
• Strong analytical, troubleshooting, documentation, communication, collaboration, and customer-service skills.
• Enterprise Network Engineering
• Experience engineering highly available datacenter, campus, WAN, internet-edge, remote-site, wireless, and VPN services.
• Experience with segmentation, least-privilege access, identity and MFA integrations, device trust, and network access control.
• Experience with load balancing, TLS termination, application delivery, certificate lifecycle management, and PKI integrations.
• Network Security & Detection
• Experience operating next-generation firewalls, threat-prevention services, secure web or DNS controls, network detection and response, and vulnerability-management processes.
• Experience integrating network-security telemetry with SIEM, logging, alerting, dashboards, and incident-response workflows.
• Experience partnering with a SOC on investigation, tuning, containment, evidence, or root-cause activities.
• Automation, Resilience & Operations
• Experience automating network or security operations through scripting, APIs, Ansible, Terraform, or infrastructure as code.
• Experience developing recovery, failover, configuration-backup, firmware-lifecycle, and vulnerability-remediation practices.
• Experience preparing changes, rollback plans, technical documentation, performance measures, and vendor-supported resolutions.
• Certifications
• Relevant credentials such as CCNA, CCNP, ACP, PCNSE or equivalent firewall-vendor certification, CWNA, Security+, CISSP, AZ-700, or similar certifications are preferred.

Skills

Required

• Enterprise LAN/WAN
• Datacenter switching
• Routing
• Firewalls
• VPN
• Wireless
• NAC
• Load balancing
• PKI and certificates
• DNS
• DHCP
• IPAM

Benefits

• Working at GSOC means more than just a job--it's an opportunity to contribute to work that truly matters.
• Mission-Driven Impact
• Your work supports secure, reliable corporate network services and cybersecurity capabilities used across GSOC's enterprise environment.
• Network Engineering & Cybersecurity Depth
• Apply both network engineering and hands-on security expertise across switching, routing, wireless, firewalls, VPN, application delivery, monitoring, automation, and incident support.
• Technical Leadership & Continuous Improvement
• Lead technical projects, mentor peers, evaluate new technologies, automate repeatable work, and strengthen resilience, visibility, and operational supportability.
• Strong Values and Professional Standards
• Work in an environment grounded in accountability, collaboration, integrity, security, compliance, and continuous improvement.
• GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.
• Participation in an on-call rotation, emergency support, and scheduled maintenance outside normal business hours is required.