Senior Network Security Engineer – Carrier Network Infrastructure, Vulnerability & Hardening

Network Engineer

Moorestown , NJ, Onsite , Hybrid, 3 days/ week

Role Overview

This role serves within the Client Identity and Access Management organization and is responsible for executing and advancing the security posture of Client core network platforms and devices (e.g., CMTS/yCMTS, routers, etc.) through secure architecture, vulnerability remediation, software patch validation, configuration compliance, secure access control enforcement, and vendor-driven hardening initiatives.

The role will partner with network architecture, engineering, compliance, operations, and vendor teams to reduce risk exposure and ensure the network platforms are resilient and aligned to Client cybersecurity standards.

Responsibilities

• Responsible for the security posture and execution roadmap for Client network domains and platforms such as Cisco, Ciena, Juniper, Arista, Nokia, F5, Fortinet, etc.
• Support vulnerability remediation, risk mitigation, and patch validation activities for critical vulnerabilities and vendor security advisories.
• Enable secure configuration rollout and compliance enforcement across supported platforms using approved network security standards, audit tooling, ticketing workflows, and remediation tracking.
• Review network functions, features, software, hardware, and engineering designs to identify security risks, required mitigations, operational impacts, and production readiness requirements.
• Perform security assessments of network platforms and services to identify threats, vulnerabilities, exposed services, insecure protocols, weak authentication methods, access control gaps, and hardening opportunities.
• Partner with cross-functional organizations/teams such as cybersecurity, architecture, network engineering, operations, and vendor teams to implement least-privilege access, improve auditability, and detect unauthorized or anomalous network changes.

Skills & Qualifications

• 7+ years of experience in network security engineering within large enterprise, telecommunications, ISP, cable, cloud, or service provider environments. Plus if familiar with Client and other MSOs.
• Experience securing carrier-grade network infrastructure supporting large-scale production environments.
• Experience with automation and scripting using Python, Ansible, PowerShell, Terraform , or similar tools.
• Hands-on experience with network hardening methodologies aligned to CIS Benchmarks, NIST, CISA guidance, or vendor security best practices .
• Experience with network compliance, vulnerability scanning, and reporting platforms .
• Knowledge of Zero Trust, secure-by-design principles, privileged access management, and identity-based network security controls .
• Experience supporting security incident response, forensic investigations, and post-incident remediation .
• Familiarity with cloud networking and hybrid infrastructure security , including AWS, Azure, and GCP .

Certifications

Industry certifications such as:

• CISSP
• CCNP Security
• JNCIS/JNCIP
• GIAC certifications
• Security+