Network Security Engineer

Job Location: Brooklyn, NY 11201 (Onsite)

Note: Candidates must have State, City, or Federal experience .

Each candidate must submit a government-issued ID (Driver’s License or Passport) and provide three professional references (names, official emails, and phone numbers).

Job Description:

The City of New York – DoITT is seeking a seasoned Network Security Engineer to join the team for a 24-month engagement. The ideal candidate will possess hands-on experience in configuring and managing complex network environments, ensuring robust security, and collaborating with cyber teams to implement proactive security measures. This role demands deep knowledge of Cisco ASA & Firepower, F5 load balancers, routing protocols, and packet analysis tools in high-security government or enterprise environments.

Specialty Areas:

• Network Security & Firewall Engineering – Manage and secure firewalls (Cisco ASA, Firepower, Zscaler), VPNs, and cloud networks.
  

• Load Balancing Solutions – Design and implement application load balancing with F5 LTM, GTM, BIG-IQ and VMware NSX .
  

• Cloud Network Security – Secure cloud infrastructures in Azure and AWS , including Express Route configurations.
  

• Monitoring & Analysis – Use Splunk, Wireshark, tcpdump, and Netscout for network diagnostics and security risk analysis.
  

• Identity & Access Control – Configure and manage Cisco ISE for endpoint authentication and policy enforcement.
  

Responsibilities:

• Collaborate with NYC Cyber Command to identify, assess, and remediate security vulnerabilities.
  

• Utilize Splunk and other tools to correlate security events and identify network threats.
  

• Design and maintain Cisco ASA and Firepower firewall solutions, including VPNs and tunnel configurations.
  

• Support and troubleshoot routing and switching infrastructure (Cisco L2/L3).
  

• Plan and implement load balancing strategies (F5, Avi/NSX Load Balancer).
  

• Manage access policies using Cisco ISE and cloud firewall tools.
  

• Document SOPs, network diagrams, and procedures using Visio or Lucidchart .
  

• Perform packet-level traffic analysis to monitor threats and resolve network issues.
  

• Ensure timely resolution of network outages and collaboration with vendors to meet SLAs.
  

Skill Matrix:

Skill
Experience (Years)

5+

5+

5+

5+

5+

Required

Required

Required

Required

Required

Mandatory Requirements:

• Minimum 5 years of experience in network security , including Cisco ASA & FirePower .
  

• At least 5 years of experience with F5 load balancing technologies .
  

• Strong background in routing protocols (BGP, OSPF, EIGRP).
  

• Proficient in packet-level analysis and network diagnostics.
  

• Experience with Cisco routers, switches, and L2/L3 troubleshooting.
  

Preferred Qualifications:

• Industry certifications: Cisco CCNA/CCNP , CompTIA Security+ , or similar.
  

• Hands-on experience in VMware NSX , NSX Advanced Load Balancer .
  

• Familiarity with Splunk and SPL scripting .
  

• Experience managing cloud infrastructure in Azure/AWS .
  

• Prior work in education or government environments .
  

• Excellent communication and documentation skills.
  

Submission Requirements:

• Updated Résumé
  

• Government-issued ID (Driver’s License or Passport)
  

• Three Professional References (Names, official emails, phone numbers)