Network Security Engineer

Job Number: 26-00740Use your skills where innovative technology solutions begin. ECLARO is looking for a Network Security Engineer for our client in New York, NY. ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!Position Overview:An experienced Network Security Engineer for a contract-to-hire engagement with one of New York City's leading healthcare organizations. This is a hands-on, senior-level role responsible for the design, deployment, and ongoing operational excellence of our network access control and security infrastructure. Brings deep technical expertise in ForeScout and thrives in a complex, compliance-driven healthcare environment where uptime and patient data protection are paramount. Responsibilities:Design, deploy, and manage ForeScout-based Network Access Control (NAC) infrastructure across enterprise and clinical environmentsDevelop and enforce device visibility, classification, and policy enforcement for managed, unmanaged, and IoT/medical devicesAuthor and maintain comprehensive technical documentation, standard operating procedures (SOPs), runbooks, and network security policiesConduct architecture reviews and lead network security improvement initiatives in alignment with HIPAA, HITECH, and NIST frameworksCollaborate with infrastructure, clinical engineering, and IT teams to ensure secure network segmentation and least-privilege accessMonitor network security events, investigate anomalies, and drive remediation efforts in coordination with the SOC teamManage and maintain next-generation firewall infrastructure (Palo Alto Networks preferred), including rule lifecycle management and threat prevention policy tuningSupport and administer F5 application delivery and security services including LTM/GTM, APM, and ASM/AWAFLead vendor engagements, coordinate with managed service partners, and serve as internal SME for network security technologiesParticipate in on-call rotation and provide escalation support for critical network security incidentsRequired Qualifications:5+ years of hands-on experience in network security engineering in enterprise environmentsDeep expertise in ForeScout Platform (formerly CounterACT), including:EyeSight, EyeControl, and eyeSegment modulesPolicy authoring, device classification, and enforcement actionsIntegration with Active Directory, SIEM, and ticketing platformsDeployment in large-scale, multi-site environmentsActive ForeScout certification (FCSS - ForeScout Certified Security Specialist, or equivalent) requiredDemonstrated ability to independently design and deliver full lifecycle NAC deployments — from architecture through implementation and documentationStrong documentation skills: ability to produce clear, detailed SOPs, network diagrams, and policy documentation for both technical and non-technical audiencesSolid understanding of network fundamentals: VLANs, 802.1X, RADIUS, DHCP, DNS, routing, and switchingExperience working in regulated industries with exposure to HIPAA, HITECH, or similar compliance requirementsBachelor's degree in Computer Science, Information Security, or equivalent practical experiencePreferred Qualifications: Palo Alto Networks expertise:Hands-on experience with PAN-OS, Panorama, and NGFW policy managementFamiliarity with Prisma Access, GlobalProtect, and Cortex XSOAR a plusPalo Alto Networks Certified Network Security Engineer (PCNSE) preferredF5 expertise:Administration of BIG-IP LTM, GTM, APM, and ASM/Advanced WAFExperience with iRules, SSL offload, and application security policiesF5 Certified BIG-IP Administrator (F5-CA) or Solution Expert (F5-CSE) preferredExperience with healthcare IoT and medical device securityFamiliarity with Zero Trust architecture principles and micro segmentation strategiesExposure to SIEM platforms (Splunk, Microsoft Sentinel) and SOAR integrationsAdditional industry certifications: CISSP, CCNP Security, CEH, or equivalentIf hired, you will enjoy the following ECLARO Benefits:401k Retirement Savings Plan administered by Merrill LynchCommuter Check Pretax Commuter BenefitsEligibility to purchase Medical, Dental & Vision Insurance through ECLAROIf interested, you may contact:Mark PapalexisMark.Papalexis@eclaro.com (646) 849-5359Mark Papalexis | LinkedInEqual Opportunity Employer: ECLARO values diversity and does not discriminate based on Race, Color, Religion, Sex, Sexual Orientation, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status, in compliance with all applicable laws.