Network security specialist

Madre Integrated Engineering Full timeWe are looking for an experienced and highly skilled Technical Lead with 10+ years of experience in designing, implementing, and managing enterprise network and security infrastructures. The role requires strong technical leadership, hands-on expertise, and the ability to guide teams while ensuring the availability, performance, and security of IT environments.Lead the design, implementation, and management of enterprise network and security architectures.Act as a technical escalation point for complex network and security issues.Oversee day-to-day operations of network and security infrastructure, ensuring high availability and resilience.Design and manage LAN, WAN, WLAN, VPN, and cloud network connectivity.Architect and manage security solutions including firewalls, IDS/IPS, WAF, DLP, EDR/XDR, and SIEM.Ensure secure network access through IAM, NAC, VPN, and Zero Trust principles.Drive security incident response, root cause analysis, and preventive controls.Perform risk assessments, vulnerability management, and remediation planning.Ensure compliance with security standards and frameworks such as ISO 27001, SOC 2, PCI DSS, and NIST.Lead and mentor network and security engineers, providing technical guidance and best practices.Collaborate with IT, cloud, application, and business teams to align network and security solutions with organizational goals.Manage vendor relationships, product evaluations, and technology upgrades.Develop and maintain technical documentation, network diagrams, SOPs, and runbooks. Requirements10+ years of experience in network and security engineering roles, with leadership exposure.Strong expertise in routing and switching (TCP/IP, BGP, OSPF, VLANs, Qo S).Hands-on experience with firewall technologies (Palo Alto, Fortinet, Cisco, Check Point).Experience with network security tools such as IDS/IPS, WAF, DDo S protection, and NAC.Solid understanding of cybersecurity concepts including threat management, encryption, IAM, and secure architectures.Experience with SIEM platforms and security monitoring.Knowledge of cloud networking and security (AWS, Azure, or GCP).Strong understanding of network segmentation, Zero Trust, and defense-in-depth strategies.Familiarity with automation and scripting (Python, Ansible, Power Shell) is a plus