Network Security Engineer

Contract Network Security Engineer needed to modernize site-to-site IPsec VPN tunnels and strengthen Cisco Firepower firewall access control policies.

Responsibilities

• Review approximately 80 existing site-to-site IPsec VPN tunnels
• Upgrade approximately 50 VPN tunnels from IKEv1 to IKEv2
• Ensure VPN configurations match organizational cryptographic standards
• Update pre-shared keys (PSKs) to meet a minimum 20-character requirement
• Validate VPN tunnel functionality after each configuration change
• Review approximately 10 firewall access control rules on Cisco Firepower systems
• Identify and remove overly permissive or broad subnet access in firewall rules
• Restrict firewall rules to required source/destination networks, ports, and protocols
• Apply principle of least privilege when updating access controls
• Run validation testing after firewall changes to confirm no service disruption
• Coordinate implementation activities with onsite campus teams and external partners
• Support execution of approved maintenance window changes
• Provide technical assistance during implementation activities
• Document VPN and firewall changes and associated validation results
• Coordinate cryptographic parameter and shared secret updates with external partners
• Support scheduling and execution of maintenance window activities

Requirements

• Experience managing site-to-site IPsec VPNs
• Hands-on experience upgrading VPNs from IKEv1 to IKEv2
• Experience configuring and validating VPN tunnel connectivity
• Knowledge of cryptographic standards and secure key management practices
• Experience managing firewall access control rules
• Experience with Cisco Firepower firewall platforms
• Ability to implement least privilege network access controls
• Experience performing post-change validation and troubleshooting network issues
• Experience coordinating technical changes with internal teams and external partners
• Experience working within structured maintenance window processes

Technologies

• IPsec VPN
• IKEv1
• IKEv2
• Pre-shared keys (PSKs)
• Cisco Firepower
• Cryptographic standards
• Secure key management practices

Preferred Qualifications

• Experience in healthcare or higher education IT environments
• Familiarity with large-scale enterprise network environments
• Experience supporting change management processes in production environments

Desired Certifications

• Cisco CCNA Security or CCNP Security (or equivalent experience)
• CompTIA Security+ or equivalent security certification
• ITIL Foundation (preferred)

Location: Rancho Cordova, CA (onsite) | Job type: contract