Security, Certificates, and Network Resource

SUMMARY

We are seeking an experienced and dedicated Infrastructure Engineer specializing in Security, Certificates, and Networks. In this role, you will be responsible for safeguarding our enterprise network infrastructure, managing the lifecycle of digital certificates (PKI), and ensuring secure, high-performance data communication across our hybrid cloud and on-premises environments.

The ideal candidate possesses a deep understanding of network security protocols, hands-on experience automated certificate deployment, and a proven track record of maintaining secure network boundaries.

Key Responsibilities

Public Key Infrastructure (PKI) & Certificate Management

• Lifecycle Management: Oversee the end-to-end lifecycle (generation, installation, renewal, and revocation) of SSL/TLS and SSH certificates across servers, load balancers, and applications.
• Automation: Implement and manage automated certificate renewal pipelines using protocols like ACME and tools such as Venafi, Certbot, or HashiCorp Vault.
• Compliance: Ensure all internal and external-facing systems comply with corporate encryption and certificate authority (CA) standards (e.g., DigiCert, Let’s Encrypt, Microsoft ADCS).

Network Security & Administration

• Perimeter Security: Deploy, configure, and maintain enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point), Intrusion Detection/Prevention Systems (IDS/IPS), and Web Application Firewalls (WAF).
• Network Connectivity: Manage secure site-to-site VPNs, remote access VPNs, and software-defined networks (SDN) across hybrid environments.
• Access Control: Implement and enforce Network Access Control (NAC) policies, segmenting networks to minimize security risks and control user and device access.

Monitoring & Incident Response

• Traffic Analysis: Monitor network traffic, logs, and alerts via SIEM tools to detect and investigate potential security breaches or anomalous activity.
• Vulnerability Remediation: Identify network-level vulnerabilities, coordinate patch management schedules for network appliances, and upgrade firmware to neutralize threats.
• Disaster Recovery: Maintain and regularly test network recovery configurations to guarantee business continuity during outages or security incidents.

Required Skills & Qualifications

• Experience: 5+ years of dedicated professional experience in network engineering, infrastructure security, or cyber security operations.
• Certificate Expertise: Thorough understanding of cryptographic protocols, PKI architecture, symmetric/asymmetric encryption, and managing SSL/TLS certificates.
• Core Networking: Deep knowledge of TCP/IP, routing protocols (BGP, OSPF), DNS architecture, and load balancing technologies (e.g., F5 BIG-IP, Citrix ADC).
• Security Hardware: Hands-on experience configuring and troubleshooting next-generation enterprise firewalls and cloud network security groups (AWS NSGs / Azure Firewalls).
• Identity Management: Experience with secure protocols like OAuth2, SAML, RADIUS, and TACACS+.

Preferred/Nice-to-Have Skills

• Proficiency with Infrastructure as Code (IaC) tools like Terraform or Ansible for automating network and security configurations.
• Scripting capability (Python, Bash, or PowerShell) to automate certificate renewals and health checks.
• Relevant industry certifications such as CISSP, CCNP Security, CompTIA Security+, or cloud provider security specialties (AWS/Azure).