Network Security Engineer

Network Security Engineer (Mid–Senior, Hybrid – Scottsdale, AZ)

$90,000 – $130,000/year · Full-time · Hybrid

We’re an established managed services provider supporting companies in the financial and payments space. Our environment is modern, self-hosted, and Linux-first: zero-trust tunneling, segmented networks, and no Windows Server.

This is a role for an experienced security engineer who wants real ownership of a security environment, not a ticket queue. You’ll work directly with company leadership on architecture decisions. We’re looking for someone who wants to build something and stay to see it through.

What you’ll do

• Design, build, and maintain firewalls, VLAN segmentation, and default-deny network policy
• Run and troubleshoot WireGuard and zero-trust remote access across multiple sites and the cloud
• Harden and patch Linux servers (Rocky/RHEL) and container hosts
• Support PCI DSS and GLBA compliance, including controls, evidence collection, and audit prep
• Monitor, investigate, and respond to security events
• Work directly with leadership on architecture decisions

Required

• 5+ years of hands-on network and systems security experience, including EDR/XDR (SentinelOne, CrowdStrike Falcon, or Defender for Endpoint)
• 3+ years administering Linux servers (RHEL family preferred)
• Hands-on experience with enterprise firewalls and VLANs (WatchGuard, Fortinet, Palo Alto, pfSense/OPNsense, or similar)
• VPN experience, ideally WireGuard
• Experience in a regulated environment such as payments, banking, or healthcare
• Clear written communication and patience with clients
• Able to work on-site in Scottsdale [X] days per week and as needed

Nice to have

• Current certification: Security+, CySA+, CCNA, RHCSA, OSCP, or CISSP
• SIEM/log analysis (Wazuh, Splunk, Elastic Security)
• Vulnerability scanning (Tenable Nessus, Qualys, OpenVAS)
• Network IDS (Suricata, Zeek, Snort)
• MFA/identity (Duo, Okta)
• UniFi, Proxmox, Docker, or Podman
• AWS networking and IAM
• SSH certificates / PKI

What we offer

• Competitive salary based on experience, with a 12-month compensation review
• Annual certification and training budget
• Hybrid schedule and flexible hours
• Health, dental, and vision insurance; paid time off
• A small team where your work matters

This role requires a background check, a confidentiality agreement, and professional references.

• To apply: send your resume and a few sentences about a network or security problem you solved that you’re proud of.