Engineer - Network Security

Reports to: Director - Network Technologies
Location: In Office, Orange CT

The base salary range for this position is dependent upon experience and location, ranging from:

• $96,400 - $120,500

• →

  Supports IT Network Security in projects, by gathering business requirements and architects / designs new network solutions to meet business needs, global standards and network & security design standards.

• →

  Interacts with global counterpart to reach agreement on solutions. Manage relationship with outsourced vendors and coordinates the execution of the design plan. Ensures that all aspects of the architecture are executed to plan.

• →

  Consistently reviews performance of existing infrastructure; plans and executes lifecycle upgrades as required to meet/exceed existing SLAs. Plans, coordinates, communicates and executes upgrades, partners with cross functional teams as required.

• →

  Partners with outsourced vendors in support of the executed design plan.

• →

  Analyzes current state and proposed network related infrastructure and conducts risks assessments based on impact and potential severity of a security related issue.

• →

  Participates in cyber investigations; analyzes data/evidence to identify potential cyber incidents and vulnerabilities.

• →

  Supports forensic research, as required to assess impact to corporate information assets. Provides insights into recommendations for corrective actions.

• →

  Monitors assigned aspects of Internet and intranet security and ensures ongoing effectiveness. Proactively assesses and makes recommendations for improvement.

• →

  Assist in the deployment, configuration, and maintenance of SDWAN solutions with preference for Fortinet. Responsibilities include monitoring SDWAN performance, troubleshooting connectivity and security issues, and collaborating with senior engineers to optimize network architecture.

• →

  Administer, configure, and optimize enterprise firewalls, with a strong preference for experience in Fortinet (FortiGate), Palo Alto Networks, and Checkpoint platforms. Responsibilities include advanced policy management, high-availability setup, firmware upgrades, and integration with SIEM and automation tools.

• →

  Implement and manage secure web gateway solutions, with a preference for Zscaler. Responsibilities include policy configuration, user authentication integration (e.g. SAML, AD), and troubleshooting web access and security incidents.

• →

  Deploy, configure, and maintain Web Application Firewall (WAF), with a preference for Akamai. Responsibilities include rule tuning, monitoring for application-layer threats, and collaborating with application teams to minimize false positives and optimize protection.

• →

  Assigns and coordinates external Internet domain names and identifiers used in network communication and assures their uniqueness.

• →

  Supports the resolution of all network security infrastructure related break/fix issues. Accurately interprets symptoms, identifies root cause and takes appropriate corrective action to resolve.

• Bachelor's degree in Computer Science, Information Systems or a related field of study with a minimum of two (2) years of hands-on experience in network engineering, including operational support and troubleshooting of enterprise firewalls, secure web gateways and web application.  An equivalent combination of education and experience may be considered. 

• Certifications: Fortinet NSE, Palo Alto PCNSE, Checkpoint CCSA/CCSE, Zscaler Certified Professional, Akamai Security certifications.

• Experience assisting in the deployment, configuration, and maintenance of SDWAN solutions is highly desirable.

• Experience working with secure web gateways: Zscaler

• Experience with web application firewalls: Akamai.

• Experience troubleshooting of enterprise firewalls: Fortinet, Palo Alto Networks, and Checkpoint

#LI-Onsite

#LI-VF1

Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.

At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law.
If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at careers@avangrid.com.

Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions.  This does not include those that will work for Avangrid Power.

Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.