Network Security Engineer - Erie, PA | TCS Job

Network Security Engineer

We are seeking an experienced Network Security / Firewall Engineer to design, implement, operate, and troubleshoot enterprise network security infrastructure. The ideal candidate will have strong hands-on experience with Cisco Firepower Threat Defense (FTD/FMC) or comparable next-generation firewall platforms, along with solid knowledge of enterprise routing, VPN technologies, network segmentation, cloud networking, and security best practices.

This is a hands-on engineering role requiring strong troubleshooting skills and the ability to work across network, security, cloud, application, and infrastructure teams.

Key Responsibilities

•Configure, manage, maintain, and troubleshoot enterprise next-generation firewall environments.

•Administer Cisco FTD firewalls using Firepower Management Center (FMC).

•Create and maintain firewall access-control policies, network/service objects, security zones, and NAT policies.

•Design, configure, and troubleshoot site-to-site IPsec VPNs and remote-access VPN solutions.

•Troubleshoot complex application connectivity issues across firewalls and network infrastructure.

•Perform packet-level troubleshooting using packet captures, Wireshark, firewall connection/session tables, logs, and platform-specific diagnostic tools.

•Configure and troubleshoot NAT/PAT, static NAT, source NAT, destination NAT, and NAT exemptions.

•Support firewall high-availability architectures and perform failover testing.

•Participate in firewall upgrades, migrations, hardware refreshes, and lifecycle-management activities.

•Review firewall policies and identify obsolete, redundant, overly permissive, or unused rules and objects.

•Support network segmentation and security-zone architecture.

•Configure and troubleshoot web/URL filtering, IPS/IDS, application control, malware protection, and other NGFW security capabilities.

•Support security infrastructure across on-premises data centers, branch locations, Internet edge, and cloud environments.

•Participate in incident response and root-cause analysis for network and security incidents.

•Create and maintain network diagrams, firewall documentation, operational procedures, implementation plans, and troubleshooting runbooks.

•Participate in change-management processes, including planning, peer review, implementation, validation, and rollback procedures.

Salary Range- $85,000-$100,000 a year

#LI-SP3

#LI-VX1