Network Specialist

We are looking for a Network Specialist with 3-5 years of hands-on experience in network security, segmentation, VPN technologies, and network access control. The ideal candidate will play a critical role in assessing network exposure, implementing secure network boundaries, and enforcing segmentation policies to ensure only approved traffic flows are permitted. Experience with ADVPN and Aruba ClearPass is essential, along with the ability to work across on-premises and hybrid cloud environments to strengthen security and minimize the organization’s attack surface. Immediate joiners will be prioritized and supported through an expedited onboarding process. This is a contract position with the possibility of extension based on performance.

Key Responsibilities

- Assess network exposure and identify traffic dependencies across multiple environments including sites, servers, cloud platforms, guest networks, and vendor access.
- Define and document approved network boundaries for inter-site, server, cloud, guest, and vendor connectivity.
- Design and implement network segmentation controls to enforce approved traffic flows and restrict inter-site connectivity.
- Manage ADVPN shortcut paths and maintain separation between production and non-production environments.
- Enforce security policies using firewalls, VPNs, Network Access Control (NAC) solutions, and host-based controls.
- Develop and maintain east-west traffic flow matrices and segmentation policies.
- Implement micro-segmentation within server farms and secure server network architectures.
- Establish segregated access for guests, contractors, and third-party vendors.
- Configure and enforce device posture assessments and compliance validation controls.
- Review and remove unnecessary routing paths, firewall rules, and network access permissions.
- Facilitate owner-based reviews for firewall rules and network access controls.
- Collaborate with application and cloud owners to address exposed test and non-production environments.
- Validate approved business traffic and ensure unauthorized network paths are blocked.
- Perform connectivity validation across sites and vessels as required.
- Maintain comprehensive network security policies, configurations, implementation records, and testing evidence.
- Support attack surface monitoring activities and contribute to major network redesign initiatives.

Required Qualifications

- 3-5 years of practical experience implementing network security technologies within enterprise environments.
- Proven expertise in ADVPN (Adaptive Dynamic VPN) implementation, administration, and troubleshooting.
- Hands-on experience with Aruba ClearPass deployment, policy management, and administration.
- Strong background in managing firewall security policies and Access Control Lists (ACLs).
- Experience configuring and supporting VPN solutions.
- Proficiency with Network Access Control (NAC) technologies.
- Demonstrated ability to implement network segmentation and enforce traffic restrictions.
- Experience working in hybrid connectivity environments combining on-premises and cloud infrastructure.
- Skilled in validating production traffic and security controls post-implementation.
- Ability to troubleshoot and resolve network security issues in live environments.
- Experience conducting controlled validation exercises to test policy enforcement.

Preferred Qualifications and Additional Skills

- Knowledge of VLAN design, migration, and segmentation.
- Experience in server network design and security architecture.
- Wi-Fi security implementation and management skills.
- Expertise in VPN posture assessment and endpoint compliance validation.
- Familiarity with internal segmentation projects and east-west traffic control.
- Experience with server farm micro-segmentation and guest wireless network isolation.
- Vendor and contractor access management, including segregated vendor VPN environments.
- Device posture checking and compliance enforcement.
- Isolation and security controls for non-production environments.
- Understanding of Azure and Google Cloud networking and cloud boundary security.
- Cross-cloud connectivity governance and traffic restriction experience.
- Skills in routing optimization, network path analysis, and firewall rule cleanup.
- Ability to perform traffic dependency analysis and flow mapping.
- Experience validating site and vessel connectivity.
- Strong documentation skills for security policies, testing evidence, and compliance reporting.
- Participation in large-scale network transformation or redesign programs.
- Relevant certifications in firewall, VPN, NAC, Aruba, or network security technologies are a plus.

This role offers the opportunity to work on critical network security initiatives within a dynamic environment, contributing to the protection and resilience of enterprise infrastructure.