Network Security Engineer

LOCAL APPLICANTS ONLY – NO SPONSORSHIPS – NO VISA TRANSFERS – NO THIRD PARTIESPosition: Network Security EngineerEmployment Status: Full Time Location: Phoenix, AZ (100% In-Office, 5 Days a Week) Shift: 1Experience: 4+ Years Weekends: MinimalSalary: DOE & Market Value Travel Required: MinimalCompany DescriptionEbocom is a fast-growing boutique technology company that provides back-office payment processing services. “Fast, focused and flexible” is our motto at eboCom and the eboCom team is the “best of the best”! We are focused on taking our technology to the next level and we are looking for another individual to join our team who possesses a “can do” attitude and is eager to help support our growth. Position DescriptionThe primary responsibility of the Senior Network & Security Engineer is to identify, design, build, maintain, and troubleshoot a High-Availability, Fault-Tolerant network and security infrastructure across all corporate offices and production Data Center environments. This role ensures maximum network uptime, enforces robust perimeter security baselines, and drives infrastructure optimization to support the company’s core operational goals. This is a full-time, on-site position requiring a physical presence in our Phoenix office 5 days a week.Responsibilities: Architecture & Implementation: Analyze, design, and implement integrated, redundant network architectures for enterprise data center and internet-facing computer systems.Firewall & Perimeter Security: Install, configure, optimize, and maintain enterprise Next-Generation Firewalls (Palo Alto PAN-OS in the Data Centers and Fortinet FortiGate at the office environments), managing threat profiles, security policies, and GlobalProtect VPN gateways.Data Center Operations: Manage Arista core and distribution switching fabrics, VLAN layouts, Cisco routing infrastructure, and routing protocols (BGP, OSPF) across multiple mission-critical Data Centers.Access Control & Governance: Establish and maintain central network access controls utilizing AAA authentication platforms (TACACS+/RADIUS). Ensure local fallback credentials and administrative secrets are rigorously managed and audited.Monitoring & Automation: Standardize and reroute network logging, SNMP/Syslog traps, and telemetry alerts to centralized team monitoring queues to eliminate single-point-of-failure administration.Disaster Recovery & Standards: Create, maintain, and routinely test comprehensive Disaster Recovery procedures. Develop and enforce rigid documentation baselines within the corporate Wiki (Confluence).Vendor & Circuit Management: Manage relationships, handle technical contacts, and negotiate requirements with core Internet Service Providers (ISPs) and hardware vendors. Maintain accurate circuit ID inventories and migration tracking schedules.Architecture, Documentation & Standardization: Drive the formal standardization of our entire network footprint; audit legacy environments to replace tribal knowledge with clear architecture baselines and maintain comprehensive, up-to-date engineering documentation.Modern ITSM Tool Utilization: Utilize Jira Service Management for tracking daily operations, change control, and structured incident response, while leveraging Confluence as the single source of truth for all network topology and standard operating procedures.Remote User Infrastructure: Architect, secure, and maintain high-performance remote access solutions (including Palo Alto GlobalProtect VPN and secure access profiles) to support a seamless experience for our remote user base.Infrastructure Support: Participate in a 24/7/365 on-call rotation for complex network infrastructure issues, utilizing structured alerting workflows to ensure rapid incident resolution and maximum uptime for our production environment.Architecture, Compliance & Implementation: Analyze, design, and implement integrated, redundant network architectures for enterprise data center and internet-facing computer systems, ensuring strict alignment with PCI-DSS and SOC2 security frameworks.Technical & Critical SkillsInfrastructure Expertise: In-depth knowledge of modern data center topology, routing architectures, high-availability protocols (VRRP/HSRP), QoS, and advanced Access Control Lists (ACLs).Core Technologies: Proven hands-on experience managing Palo Alto Networks and Fortinet firewalls, Cisco routers, Arista switches, and enterprise Load Balancing architectures. (Experience migrating or managing centralized controllers like Panorama is a plus).Ownership & Initiative: Ability to work independently with limited supervision, take absolute ownership of problem resolution, and maintain a proactive versus reactive operational posture.Adaptability & Focus: A quick learner who is multi-task oriented, creative, and highly organized under pressure. Capable of managing shifting priorities balanced with exceptional attention to technical detail.Communication & Teamwork: A non-territorial team player with high ethics and integrity who keeps staff and leadership informed. Ability to communicate complex network issues effectively to both technical and non-technical audiencesStandardization & Lifecycle Management: Proven track record of taking unmapped or loosely documented network environments and building scalable architecture models, naming conventions, and standard configurations.Operational Discipline: Deep familiarity with modern ITIL practices, including disciplined ticket tracking in Jira, proactive post-incident root-cause analysis, and a strict commitment to documenting change windows in Confluence.Security & Compliance Frameworks: Strong operational familiarity with PCI-DSS and SOC2 control requirements, specifically pertaining to network segmentation, vulnerability remediation, penetration testing architectures, and audit logging standards.Position Qualification RequirementsExperience: 4+ years of dedicated network engineering and network security experience in high-availability, multi-site environments.Infrastructure Hybridity: Experience with Palo Alto, Fortinet, Cisco, and Arista hardware and local resource integrationInfrastructure Hybridity: Experience with Palo Alto/Cisco and local resource integration.Education: Associate’s Degree in a technical discipline or equivalent work experience.Soft Skills: Exceptional attention to detail and the ability to communicate with both technical and non-technical audiences.Physical: Ability to lift/move objects up to 35 lbs. and perform physical hardware installs.Availability: Must be willing and able to participate in a 24/7/365 on-call escalation rotation to support a mission-critical, high-availability payment processing network.Work Location Environment: Ability to work in-office 5 days a week at our Phoenix location to collaborate directly with internal teams and handle hands-on hardware requirements.Compliance Familiarity: Proven experience operating and maintaining networks within SOC2 and PCI-DSS certified environments.Compensation Package:Paid Personal Time Off (vacation and sick days)100% Paid - Family Medical, Dental and Vision Insurance100% Paid - Life, Short-term and Long-term Disability InsuranceCompetitive salaryRespectful and Harmonious First-Class Work EnvironmentPaid Covered Parking