network security specialist

Texas Department of Criminal Justice

<div></div><div><div>Organization: INFORMATION TECHNOLOGY<div>
</div></div><div>
Primary Location: United States-Texas-HUNTSVILLE<div>
</div></div><div>
Job: Office and Administrative Support<div>
</div></div><div>
Employee Status: Regular<div>
</div></div><div>
Schedule: Full-time<div>
</div></div><div>
 Travel Moderate<div>
</div></div><div>
Salary/Salary Range: $4,330.67 - $4,793.80 Pay Basis: Monthly<div>
</div></div><div>
Hazardous duty/Longevity Pay: Longevity Pay<div>
</div></div><div>
Training Academy: No<div>
</div></div><div>
Work Site Visits: No<div>
</div></div><div>
Study Material: No<div>
</div></div><div>
Overtime Status: Exempt<div>
</div></div><div>
Job Posting: Apr 10, 2026, 12:00:00 AM<div>
</div></div><div>
Closing Date: Apr 20, 2026, 11:59:00 PM</div><div></div><div> 
JOB SUMMARY 
Performs complex network work. Work involves the planning, implementation, and monitoring of 
security measures for the protection of information systems and infrastructure. Works under general 
supervision with moderate latitude for the use of initiative and independent judgment. 

ESSENTIAL FUNCTIONS 
A. Assists the Office of the Chief Information Security Officer (OCISO) in monitoring information 
security issues related to agency systems and workflow to ensure the internal security controls 
are appropriate and operating as intended; and supports the OCISO with the execution of 
information technology security projects for the agency. 
B. Responds and coordinates responses to information security incidents; conducts agency-wide 
data classification assessment and security audits and aids in the management of remediation 
plans; and confers with management, other departments within the agency, and law 
enforcement agencies to manage security vulnerabilities. 
C. Prepares security documentation to include department policies, procedures, agency 
notifications, web content, and security alerts; performs risk assessments of data processing 
systems; installs firewalls, data encryption, and other security measures; and conducts periodic 
audits of various system users to determine user removal, transfer, and limitation of access. 
D. Facilitates the performance of audits and tests to aid in the evaluation of locally developed 
software fixes and patches to improve system performance and efficiency; applies threat 
modeling for known software security remediation; and assists in the application of security for 
mobility and cloud. 
E. Trains staff on network and information security procedures.<div> 
<ul><li>Performs a variety of marginal duties not listed, to be determined and assigned as needed.</li></ul></div></div><div>
Position Filled At I, II, or III Pay Level 
Network Specialist I
Minimum Salary: Gr. B17 ($4,330.67/month)
**The salary for an ERS Retiree (or non-contributing member) will
be $4,237.24.**
For full job description and minimum qualifications, please visit:
http://www.tdcj.texas.gov/divisions/hr/pd/008318.pdf 
Network Specialist II
Minimum Salary: Gr. B19 ($4,593.80/month)
**The salary for an ERS Retiree (or non-contributing member) will
be $4,493.95.**
For full job description and minimum qualifications, please visit:
http://www.tdcj.texas.gov/divisions/hr/pd/008234.pdf 
Network Specialist III
Minimum Salary: Gr. B21 ($4,793.80/month)
**The salary for an ERS Retiree (or non-contributing member) will
be $4,689.07.**
For full job description and minimum qualifications, please visit:
http://www.tdcj.texas.gov/divisions/hr/pd/008226.pdf 
**This is a Career Ladder position. When filling available positions,
consideration will be given to the selected applicant's education
and experience.** 
**The Information Technology Division has only one Network Specialist
position available. Applicants need only submit one application for
employment.**</div><div>
Additional Information<div></div> 
Please note that applications submitted via handwritten forms, email, mail, or fax will not 
be accepted. Your job application must be completely filled out and include all 
employment, do not limit employment to the past 10-15 years. Your application must 
contain complete job histories, which include job titles, name of employer, dates of 
employment, supervisor&rsquo;s name and phone number, and a description of duties 
performed, and whether it was full-time or part-time and hours per week. If any of this 
information is not provided, your application may be rejected as incomplete 
If you are scheduled for an interview and require any reasonable accommodation in our 
interview process, please inform the hiring representative who contacts you to schedule 
your interview. Whenever possible, please give the hiring representative sufficient time 
to consider and respond to your request. 
Only candidates selected for an interview will be contacted.<div><ul><li> 
Outside applicants will be required to submit to pre-employment drug testing as a</li></ul>
condition of employment.*</div> 
Questions regarding this posting may be directed to:
Shelbie Morrow 
Human Resources Headquarters 
2 Financial Plaza, STE 600 
Huntsville, TX 77340 
PH (936) 437-4106 
EMAIL hr.selectionsteam3@tdcj.texas.gov
Military Occupation Specialty Code<div></div> 
The following Military Occupational Specialty codes are generally applicable to this position. Applicants must fully complete the summary of experience to determine if minimum qualifications are met.
Military Crosswalk Guide - Prepared by the State Auditor's Office
Texas State Auditor's Office - Job Descriptions</div><div>
EEO Statement<div></div> 
The State of Texas is an Equal Opportunity Employer and does not discriminate on the 
basis of race, color, national origin, sex, religion, age or disability in employment or the 
provision of services. You may make copies of this application and enter different 
position titles, but each copy must be signed. Resumes will not be accepted in lieu of 
applications, unless specifically stated in the job vacancy notice.</div></div>

Network Specialist I-III - Information Security - Information Technology Division (020678)

MANTECH

<div>MANTECH seeks a motivated, career and customer-oriented COMSEC Information Security Specialist to join our team in Washington, D.C..
Responsibilities include but are not limited to:<ul><li>
Responsible for applying Information Assurance expertise and knowledge to network and/or enterprise security.</li><li>
Familiar with and able to apply &ldquo;best practices&rdquo; security methodologies.</li><li>
Functional expertise in one or more information assurance technologies or capabilities such as Vulnerability/Threat Assessments, Network Intrusion Detection, Secure Operations, Firewall Design &amp; Deployment, Public Key Encryption, Virtual Private Networks, etc. Provides COMSEC helpdesk support to client&rsquo;s personnel during normal business hours and during emergency events</li><li>
Interfaces with all necessary levels of management and staff regarding Information Assurance services.</li><li>
Maintains and updates client&rsquo;s COMSEC Policy Guide and COMSEC SOPs. Conduct semi-annual inventories of COMSEC sub-accounts.</li><li>
Plans and conducts compliance audits and inspections on client&rsquo;s COMSEC accounts.</li><li>
Provides COMSEC Access Briefings and debriefings when requested by the client.</li></ul>
Minimum Qualifications:<ul><li>
B.A. or B.S. in related field with one (1) year of experience maintaining and sustaining enterprise environments. Degree may be substituted for four (4) years of professional enterprise services experience for a total of five (5) years.</li><li>
Strong understanding of COMSEC disciplines.</li><li>
Knowledgeable about the National Security Agency (NSA) policies and accounting procedures required for coordinating customers&rsquo; requirements and resolving COMSEC matters.</li><li>
Strong proficiency in Microsoft Excel.</li></ul>
Preferred Qualifications:<ul><li>
4 years of customer service, administrative services/Asset Management experience</li><li>
4 years of COMSEC custodian experience</li><li>
Security+ certification</li></ul>
Clearance Requirements:<ul><li>
Must be a US Citizen and possess a current/active TS/SCI clearance</li><li>
Must be willing and able to pass a polygraph</li></ul>
Physical Requirements:<ul><li>
The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.</li><li>
Must be able to lift and move hardware weighing up to 50 pounds.</li></ul></div>

COMSEC Information Security Specialist

alfanar

<div>
 Job description:
 
 
 Job Purpose
 
 The Network Security Engineer is responsible for the daily administration, maintenance, and monitoring of the organization&rsquo;s security infrastructure. This role focuses on ensuring that firewalls, NAC systems, and WAFs are configured correctly to protect company assets and support secure business operations.
 
 Key Accountability Areas
 
 Network Security Operations
 
 &bull; &nbsp; &nbsp;Configure and maintain enterprise firewalls (Palo Alto/Fortinet/Cisco), IDS/IPS, and VPN gateways.
 
 &bull; &nbsp; &nbsp;Administer Aruba ClearPass for Network Access Control (NAC), including managing guest access, BYOD policies, and 802.1X troubleshooting.
 
 &bull; &nbsp; &nbsp;Monitor and tune WAF policies to protect web applications, ensuring regular signature updates and analyzing blocked traffic logs.
 
 System Hardening &amp; Implementation
 
 &bull; &nbsp; &nbsp;Apply security baselines to network devices and ensure its compliance.
 
 &bull; &nbsp; &nbsp;Execute network segmentation tasks as directed, ensuring internal traffic is restricted according to the principle of least privilege.
 
 &bull; &nbsp; &nbsp;Perform regular firewall rule reviews to identify and decommission unused or risky policies.
 
 Vulnerability &amp; Incident Support
 
 &bull; &nbsp; &nbsp;Perform vulnerability scans using tools like Nessus or Qualys and assist in the technical remediation of identified risks.
 
 
 &bull; &nbsp; &nbsp;Ticket Resolution: Timely resolution of security-related service requests and troubleshooting incidents.
 
 &bull; &nbsp; &nbsp;Policy Accuracy: Successful implementation of firewall and WAF changes with zero unauthorized downtime.
 
 &bull; &nbsp; &nbsp;NAC Stability: Ensuring seamless authentication for corporate and guest devices via Aruba ClearPass.
 
 &bull; &nbsp; &nbsp;Documentation Quality: Keeping all security asset inventories and diagrams up to date.
 
 
 &bull; &nbsp; &nbsp;Act as Tier 2 supports security incidents, analyzing SIEM alerts and escalating complex threats to the Senior Engineer or SOC lead.
 
 &bull; &nbsp; &nbsp;Coordinate with vendors (e.g., following up on support tickets with Vendor side) to resolve hardware or software defects.
 
 Compliance &amp; Documentation
 
 &bull; &nbsp; &nbsp;Maintain technical documentation for all security configurations, network diagrams, and standard operating procedures (SOPs).
 
 &bull; &nbsp; &nbsp;Collect evidence for security audits to demonstrate compliance with NCA ECC and internal policies.
 
 
 &bull; &nbsp; &nbsp;Ticket Resolution: Timely resolution of security-related service requests and troubleshooting incidents.
 
 &bull; &nbsp; &nbsp;Policy Accuracy: Successful implementation of firewall and WAF changes with zero unauthorized downtime.
 
 &bull; &nbsp; &nbsp;NAC Stability: Ensuring seamless authentication for corporate and guest devices via Aruba ClearPass.
 
 &bull; &nbsp; &nbsp;Documentation Quality: Keeping all security asset inventories and diagrams up to date.
 
 
 Sucess Criteria:
 
 <ul>
 <li>
 Ticket Resolution: Timely resolution of security-related service requests and troubleshooting incidents.
 </li>
 <li>
 Policy Accuracy: Successful implementation of firewall and WAF changes with zero unauthorized downtime.
 </li>
 <li>
 NAC Stability: Ensuring seamless authentication for corporate and guest devices via Aruba ClearPass.
 </li>
 <li>
 Documentation Quality: Keeping all security asset inventories and diagrams up to date.
 </li>
 </ul>
 Role Accountability
 
 
 Leadership
 
 
 &bull; &nbsp; &nbsp;Assist in daily operational tasks and collaborate effectively within the team to meet functional objectives, supporting efforts to enhance workflow efficiency and team productivity.
 
 
 Strategy and Planning
 
 
 &bull; &nbsp; &nbsp;Provide operational support in executing strategy plans, ensuring tasks are completed in alignment with the broader organizational objectives.
 
 
 Policy, Systems and Procedures
 
 
 &bull; &nbsp; &nbsp;Support the implementation and maintenance of operational policies and procedures, ensuring compliance with standards and contributing to the efficiency and effectiveness of daily operations.
 
 
 
 Certifications (Required)
 
 : Cisco Certified CyberOps Associate, CompTIA Security+, or Aruba Certified ClearPass Associate (ACCA).
 
 
 
 Certifications (Preferred
 
 ): Fortinet NSE 4, CCNA Security, or CySA+).
 
 Academic Qualification Bachelor Degree in Science in Cybersecurity or Computer Science Work Experience 2 to 5 Years Technical / Functional Competencies Work under pressur MS Office Teamwork Time Management Well Organized Communication Creativity Critical thinking Initiative Risk Assessment Resource Management Analytical thinking Adaptability
</div>

Network Security Analyst

Systems Limited

<div>
 
 
 Job Title:
 
 Firewall Network Engineer (L3) &ndash; Fortinet, Palo Alto &amp; Multi-Vendor Security
 
 
 
 
 The Firewall Network Engineer (L3) provides advanced network security support, designing, implementing, and managing multi-vendor firewall and security solutions (Fortinet, Palo Alto, Check Point, Cisco, and Radware) to ensure system availability, integrity, and confidentiality.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Deliver L3 escalation support for complex security incidents and connectivity issues across FortiGate, Palo Alto, and Check Point firewalls.
 </li>
 <li>
 Troubleshoot security policies, NAT, routing, and session handling using CLI and packet capture tools.
 </li>
 <li>
 Resolve advanced IPsec (IKEv1/IKEv2) and SSL VPN issues, including negotiation failures and routing conflicts.
 </li>
 <li>
 Investigate traffic drops, Application-ID issues, and enforcement failures of IPS, AV, and URL filtering profiles.
 </li>
 <li>
 Manage and troubleshoot DDoS protection mechanisms using Radware solutions.
 </li>
 <li>
 Maintain and troubleshoot HA configurations (Active/Passive, clustering) and failover issues across firewall platforms.
 </li>
 <li>
 Review and validate firewall rule changes, security profiles, and NAT policies before production deployment.
 </li>
 <li>
 Utilize firewall policy management and compliance tools such as AlgoSec and Tufin.
 </li>
 <li>
 Monitor and respond to alerts from Cisco IPS and other threat detection systems.
 </li>
 <li>
 Implement and manage file integrity monitoring using Tripwire (FIM).
 </li>
 <li>
 Lead incident resolution during P1/P2 outages and coordinate with SOC, network, and application teams.
 </li>
 <li>
 Support firewall upgrades, migrations, and performance optimization efforts.
 </li>
 </ul>
 
 
 
 
 
 Required Skills and Experience
 
 
 <ul>
 <li>
 Proficiency with FortiGate, Palo Alto, and Check Point firewall platforms.
 </li>
 <li>
 Experience with Radware DDoS protection solutions.
 </li>
 <li>
 Strong hands-on experience with Cisco technologies (routing &amp; switching, Cisco IPS).
 </li>
 <li>
 Familiarity with firewall assurance and automation tools such as AlgoSec and Tufin.
 </li>
 <li>
 Knowledge of File Integrity Monitoring (FIM) tools like Tripwire.
 </li>
 <li>
 Strong knowledge of TCP/IP, OSPF/BGP routing, VLANs, and network segmentation.
 </li>
 <li>
 Expertise in NAT, VPN technologies, and firewall rule lifecycle management.
 </li>
 <li>
 Experience with high-availability firewall configurations and failover mechanisms.
 </li>
 <li>
 Strong analytical and problem-solving skills in incident management.
 </li>
 <li>
 Excellent communication and collaboration skills for cross-team coordination.
 </li>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Information Technology, or related field.
 </li>
 <li>
 Preferred certifications: NSE, PCNSE, CCNP Security, Check Point (CCSA/CCSE), or equivalent.
 </li>
 </ul>
</div>

Network Security Engineer

HCA Healthcare

<div>Are you passionate about the patient experience? At HCA Healthcare, we are committed to caring for patients with purpose and integrity. We care like family! Jump-start your career as a Senior Network Security Engineer today with HCA Healthcare.
<h5 class="jobSectionHeader">Job Summary and Qualifications</h5>
<h5 class="jobSectionHeader">JOB SUMMARY
Lead efforts in implementation, modernization, standardization and enhancement of network security controls to protect a Fortune 100 enterprise&rsquo;s infrastructure, patients and data from increasing risk and threats. The position will perform and oversee reviews and assessments of policies for risk and vulnerabilities and identify potential hardening opportunities, provide remediation recommendations, designs and solutions while implementing configuration changes for continuous security control maturity and risk reduction.
This position will work collaboratively with other IT teams to implement risk management practices, optimize technology solutions, monitor and adjust infrastructure to meet current and future needs, ensure compliance with regulatory requirements, and continuously plan for the future to improve our security posture and control maturity. The ideal candidate will be experienced in network security fundamentals and have a strong understanding of how to develop and implement remediation plans to address identified risks, implement new features and technologies, standardize and optimize existing technologies, establish and maintain baselines, and automate processes wherever possible to increase efficiency and reduce errors.
GENERAL RESPONSIBILITIES
Responsibilities include but are not limited to the following;
<ul><li>Evaluate, recommend and implement appropriate security measures, including next-generation firewall features, intrusion detection/prevention systems, VPN, network segmentation/zero trust, multifactor and access control mechanisms</li></ul>
<ul><li>Conduct firewall rule reviews, security audits, baseline and best practice compliance, forensic network investigation to support data transmission adherence and implement or oversee recommendations</li></ul>
<ul><li>Support and manage network security solutions to protect the organization's infrastructure, applications, and data from cyber threats in accordance with regulatory and industry requirements, such as PCI DSS, SOX, NIST, ISO 27000 and HIPAA</li></ul>
<ul><li>Evaluate vulnerability assessments, penetration tests, metrics and security audits to identify potential hardening opportunities and provide remediation recommendations and solutions.</li></ul>
<ul><li>Recommend and implement complex solutions and configuration changes within a large enterprise network in support of continuous security control maturity and risk reduction</li></ul>
<ul><li>Participate in incident response and disaster recovery planning and testing</li></ul>
<ul><li>Collaborate with other IT teams to ensure that network security controls are integrated with other systems, applications and comply with security standards</li></ul>
<ul><li>Routinely perform audits and control tests on deployed technologies, collecting and consolidating indicators of performance, risks, trends and providing recommendations, baseline and regulatory compliance ratings.</li></ul>
<ul><li>Manage relationships with vendors and contractors to ensure that security services are timely delivered and implemented in alignment to security policies</li></ul>
<ul><li>Collaborate on the development and documentation of security policies and procedures, training and awareness.</li></ul>
<ul><li>Provide guidance and training to peers on compliance and best practices.</li></ul>
<ul><li>Research design enhancements and identify automated solutions or best of breed technologies while assisting with integration tests with vendors.</li></ul>
<ul><li>Keep up-to-date with the latest threats and vulnerabilities, as well as relevant regulations and industry best practices, and implement recommendations to improve the organization's security posture and control maturity.</li></ul>
EDUCATION AND EXPERIENCE
Bachelor&rsquo;s degree preferred
Must have 5+ years of relevant work experience required
OTHER/SPECIAL QUALIFICATIONS
Extensive experience with security technologies, such as next-generation firewalls, intrusion detection/prevention systems, VPN, network segmentation, access control mechanisms, and security design, management, best practices, policy, standards in large 1000+ firewall environments.
Expertise in Checkpoint Firewall, CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco Network Security Products &amp; Technologies (i.e. Firepower, ASA, VPN, WSA, ISE, Stealthwatch, etc.)
Strong understanding of network protocols, topologies, tools, subnetting and architectures
Aptitude in Network Security Policy Management tools (Algosec, Tufin) and/or conducting risk assessments, firewall rule review, and security audits
Strong knowledge of enterprise security technologies and processes (Zscaler, Advanced Threat Detection Tools, Antibot, Antimalware, Threat Emulation, SIEM, IDS/IPS, Network Packet Analysis, Netflow, etc.)
Experience designing solutions for security standards and frameworks, such as HIPAA, SOX, PCI DSS, HITECH, ISO/IEC 27001, and NIST Cybersecurity Framework
Network Security Management Tools/Technologies (e.g: Splunk, Trustsec, segmentation, syslog, etc..)
Excellent verbal and written communication, interpersonal, analytical and problem-solving skills.
Demonstrated leadership and mentorship skills, with the ability to guide and train junior engineers
Ability to work independently and as part of a team
Relevant certifications from ISC2 (CISSP), GIAC (GISP), ISACA (CISA), Cisco Security or CompTIA are a plus
PHYSICAL DEMANDS/WORKING CONDITIONS
<ul><li>Position expectations are minimal supervision required due to design, service and support knowledge/skillsets</li></ul>
<ul><li>Position may require periodic after hours work and light travel at times with little notice</li></ul>
<ul><li>Position requires sitting for extended periods. In office requirement minimum 2 days per week.</li></ul>
Benefits</h5>
HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:<ul><li>
Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services</li><li>
Wellbeing support, including free counseling and referral services</li><li>
Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence</li><li>
Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling</li><li>
Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing</li><li>
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts</li></ul>
Learn more about Employee Benefits
Note: Eligibility for benefits may vary by location.
HCA Healthcare has been recognized as one of the World's Most Ethical Companies&reg; by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses. 
&quot;The great hospitals will always put the patient and the patient's family first, and the really great institutions will provide care with warmth, compassion, and dignity for the individual.&quot;- Dr. Thomas Frist, Sr. 
HCA Healthcare Co-Founder
If you are looking for an opportunity that provides satisfaction and personal growth, we encourage you to apply for our Senior Network Security Engineer opening. We promptly review all applications. Highly qualified candidates will be contacted for interviews. Unlock the possibilities and apply today!
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</div>

Senior Network Security Engineer

Apple

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other&rsquo;s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It&rsquo;s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you&rsquo;ll do more than join something - you&rsquo;ll add something. 
 
People at Apple don&rsquo;t just build products - they craft the kind of experience that has revolutionized entire industries. The diverse collection of our people and their ideas encourage innovation in everything we do. Imagine what you could do here! Join Apple, and help us leave the world better than we found it. 
 
Apple&rsquo;s Network Infrastructure is a critical foundation in delivering Apple&rsquo;s services (such as iCloud, iTunes, Siri, Maps, Private Cloud Compute) to billions of customers, and its employees. Apple&rsquo;s Data Center Networking team is responsible for all aspect of the Network Infrastructure, from Operations to Architecture, thats deployed globally across Apple&rsquo;s Data Centers and Edge locations. We are responsible for delivering a network that can match Apple&rsquo;s scale, reliability and security goals. 
 
We work closely with Apple&rsquo;s other Infrastructure organizations, Hardware and Software Architecture teams to influence, build and operate Apple&rsquo;s Infrastructure. Our influences can range anywhere from Data Center Network Fabrics to a Hardware System Design. We listen to different perspectives, help surface innovative ideas, and drive decisions that move us forward. 
 
Description 
 
As part of the Data Center Network Security Engineering team, you will collaborate closely with the SDI team to influence the design of next-generation security products and features, and to operationalize innovative security solutions that power Apple&rsquo;s hyperscale network infrastructure. Our environment extends well beyond Apple&rsquo;s data centers and edge locations, encompassing Apple Cloud platforms as well as third-party cloud environments. 
 
This role spans the full spectrum of network security, from on-premises data centers to hybrid and multi-cloud architectures. We are seeking a highly motivated engineer with a strong passion for designing, implementing, and securing large-scale cloud and data center network infrastructures. You will play a key role in protecting hybrid environments by applying advanced network security controls, automation, and industry best practices across on-prem, cloud, and multi-cloud deployments. 
 
&quot;,&quot;responsibilities&quot;:&quot;Partner with network architects, software, platform, and infrastructure teams to deliver Apple&rsquo;s next-generation network security vision across data center, cloud, and edge environments. 
 
Design and implement scalable network security architectures that protect hyperscale, hybrid, and multi-cloud infrastructure. 
 
Influence infrastructure, platform, and service designs by embedding security requirements early in the architecture and development lifecycle. 
 
Drive secure-by-design hardware and system architecture decisions through threat modeling, security requirements, and design reviews. 
 
Define and enforce network security policies, standards, and best practices that balance strong security with operational scalability. 
 
Lead the integration and operationalization of new security technologies across existing and next-generation network environments. 
 
Evaluate, deploy, and automate advanced network security controls to improve consistency, resiliency, and efficiency at scale. 
 
Serve as a senior technical authority, providing design guidance, mentorship, and security leadership across engineering teams. 
 
Preferred Qualifications 
 
10+ years experience in building, securing, and deploying large scale data center network &amp; cloud environments 
 
CISSP or equivalent certification(s) 
 
Extensive understanding of public &amp; private cloud networking security architecture &amp; compute virtualization technologies 
 
Experience in OVS, Container &amp; Kube networking 
 
Engineering leadership experience 
 
Self-starter, self-motivated, self-directed, and self-sufficient. Drives ideas from inception to implementation 
 
Demonstrates consistent technical, organizational, and industry-level awareness. 
 
Technical presentation and communication skills with the ability to articulate concepts, designs and decisions to both technical and non-technical audiences. 
 
Proficiency in one or more software languages (Swift, Golang, Python, etc) 
 
Linux/Unix competence 
 
Minimum Qualifications 
 
Sophisticated knowledge of TCP/IP, routing protocols, security protocols and large scale network features. 
 
Deep technical background in network-layer security mechanisms 
 
Routing isolation 
 
Routing security 
 
Stateful and stateless firewalls 
 
Network access control 
 
VPN and tunneling technologies 
 
Cloud-scale networking security background in developing, enforcing, and maintaining security frameworks, policies, and best practices. 
 
Experience deploying and scaling overlay networking technologies (VXLAN, GRE, IPSec, etc) 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $203,300 and $305,600, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Senior Security Engineer

Openkyber

<div>Hi, Hope you are doing great! Please find the below Job description Role: Network Security (L3) Location: Houston, TX or Dallas, TX (Onsite) Responsibilities Manage day-to-day Operations according to customer environment Organizational Functions: Develop and implement network security architecture, policies, and procedures to protect against threats. Should be able to provide L3 level support on critical/Outage situation and drive end to end until the resolution. Good understanding of network protocols (HTTP, HTTPS, DNS, TCP/IP). Should have Strong expertise in: Implementing and maintaining Checkpoint firewall and associated software module (VPN, URL Filtering, IPS etc.) infrastructure. Should have good working experience on checkpoint VPN (S2S &amp; Remote access). Deep understanding of Cloudflare content delivery network (CDN) and security solutions, including web application firewalls (WAF ), bot management, and DDoS protection. Deep understanding of RADIUS, TACACS+, 802.1X, EAP methods, and networking protocols. Installation and configuration of ClearPass Policy Manager (CPPM), including profiling, onboarding, and guest services. Resolve complex authentication failures, latency issues, and TACACS+ service issues. Proficiency with Zscaler tools ( ZIA, ZPA, ZDX ), packet capture analysis, and scripting languages (Python, PowerShell) for automation. Design, implement, and tune ZIA/ZPA policies for roaming, branch, and third-party users, utilizing . Resolve complex L2/L3 issues related to user connectivity, authentication (SAML, SCIM, Azure AD), and access flows. Deep understanding of Zero Trust Network Access (ZTNA), Firewalls, and IPSec/SSL VPNs. Create and maintain comprehensive documentation related to network security infrastructure and procedures following the NIST and CIS standards. Identify the in-efficiencies in the operations and identify potential solutions to improve efficiency. Own and drive improvements in the areas of Operations, technology, Advisory and customer satisfaction. Stay up to date on emerging security threats, technologies, and industry trends. Manage and mentor a team of network security engineers and analysts. One should identify possible automation capabilities, their execution within the network security products and process and deliver across multiple customer environments. Should be cross-skilled across multiple technologies covering products like Firewalls, Web-Proxies, as well as cloud security products ( AWS, Azure, Google Cloud Platform etc.) Should prepare weekly and monthly performance reports across multiple customer environments (people, technologies, Process Gaps, Risk, RAG status etc.) Should be able to conduct internal training to address the skill gap as well as motivate the team to do technical certifications. Core Functions: Focus on technologies and bring automation capabilities. Regular reporting on the state of the customer delivery. Maintain KPIs for the teams and report on Service Improvement Areas to senior management Identify risks and maintain compliance with submission of client-facing reports. Focus on industry-based practices and configuration and guide the team to follow the same. Individual Performance Measurement Criteria - Bring quality in service delivery and work on cross killing people to increase productivity. - Quality and effectiveness in communications and engagement with stakeholders. - Low / Zero Escalation from the customers - Driving Innovation to improve Service standards &amp; Quality. Technical Skills Proficiency Level Understanding of the different security technologies, Experience in deploying, configuring and troubleshooting of 1. Firewalls ( Checkpoint ) 2. NAC Aruba Clearpass 3. Web application Firewall Cloudflare 4. Web-Proxy - Zscaler (ZIA/ZPA/ZDX) 5. Email Security Abnormal AI 6. Load balancer F5 BIG-IP Experience in different Information Security Processes. 1. Security Change Management 2. Rule Base Reviews &amp; Optimization 3. Security Incident Management (Standard &amp; Critical) Understanding of different Security Architectures. Communication and Organizational skills Good command of the English language, with excellent written and verbal skills. Proactive in communication and appropriate selection of audience according to topic. Highly organized and capable of tracking a variety of tasks to closure. Good time management principles and effective in prioritizing workloads. Cultural Requirements Works collaboratively with other teams and builds positive working relationships Able to learn quickly and apply common sense to new situations, but understand when it is appropriate to engage others for advice Open and transparent style and approach when working with others Places a significant level of importance on personal &amp; team development and understanding then improving upon weakness Accepting feedback from managers, peers, and clients regarding work performance Utilizes a goal-oriented approach, which drives self-improvement both personally and professionally and drives the teams. Takes the initiative to work on tasks outside of his or her immediate scope of responsibility and encourages others to do so. Experience Required Minimum overall experience of 10-12 years - Minimum of 8 years' experience in Information Security - Minimum of 6 years' experience in running a Security Operations Center for a large organization. Certifications Required Industry-recognized certifications such as CCSA/CCSE, CCIE, or equivalent is highly desirable. Education Qualifications Preferably Graduate with Science/Eng Thanks &amp; Regards, OpenKyber , US IT Recruiter, OpenKyber Inc. 1505 Lyndon B Johnson Fwy #327, Dallas, TX 75234 LinkedIn:
For applications and inquiries, contact: hirings@openkyber.com</div>

Associate Network Security Engineer

Search 10000+ Network security specialist jobs near you this April. New roles added regularly across leading industries. Apply today.