Ferguson is looking for a Network Security Engineer to ensure only trusted users and traffic can access our enterprise networks. In this role, you will operate and improve global security platforms including firewalls, intrusion prevention, DNS security, wireless security, and DDoS protection. You will partner with various teams to drive secure-by-design outcomes and solve complex issues.
What You'll Do
- Operate and administer global Network Security platforms supporting enterprise and data center environments.
- Act as a technical authority and support point for complex network security issues impacting enterprise, data center, and hybrid environments.
- Drive secure-by-design outcomes by partnering with Architecture, Infrastructure, SOC/NOC, and Application teams.
- Ensure network security services are reliable, scalable, well-documented, and aligned with business and risk objectives.
- Contribute to the evolution of network security capabilities through technology evaluation, service enhancement, and process optimization.
- Engineer, administer, and optimize next-generation firewall environments, including security policy management, network segmentation, intrusion prevention, and SSL/TLS decryption.
- Administer and enhance DNS security services, including policy design, threat protection, and reporting.
- Lead or support the deployment and operation of SD-WAN security controls, wireless intrusion prevention, and DDoS protection platforms.
- Develop and execute security test plans based on architectural designs; identify deficiencies and implement improvements.
- Serve as a subject-matter expert for firewall, DNS security, SD-WAN, and related network security technologies.
- Respond to security incidents, service requests, and escalations, ensuring resolution within defined service levels.
- Create and maintain runbooks, operational documentation, and workflows.
- Support mergers and acquisitions through network security assessments, discovery activities, remediation planning, and secure integration design.
- Advocate for new or enhanced network security services and contribute technical requirements to technology selection.
- Drive operational efficiencies and automation.
- Deliver assigned initiatives on time and in alignment with service level expectations.
What We're Looking For
- Bachelor’s degree in computer science, Information Security, MIS, or a related field, or equivalent practical experience.
- 4 - 7 years of hands-on experience in network security engineering within large enterprise environments.
- Demonstrable experience managing and operating large-scale next-generation firewall policies for complex enterprises.
- Strong practical experience with DNS security, DDoS protection, wireless security, VPNs, and SD-WAN technologies.
- Deep understanding of network and web protocols, routing (e.g., BGP), firewall architectures, intrusion prevention, and network segmentation.
- Experience supporting enterprise security assessments, remediation efforts, and modernization initiatives.
- Strong analytical and troubleshooting skills, with the ability to resolve sophisticated, ambiguous problems.
- Excellent written and verbal communication skills, including the ability to explain technical concepts to non-technical audiences.
- Demonstrated ability to work independently, take initiative, and provide technical leadership through mentoring, documentation, and fostering collaboration.
- Working understanding of the SDLC and QA lifecycle, and how network security integrates into modern delivery practices.
- Demonstrated integrity, curiosity, adaptability, and a strong customer-focused approach.
Nice to Have
- Experience with Palo Alto Networks Panorama and/or Versa Director (other NGFW platforms considered).
- Certifications (e.g., CCNA, SSCP, CISSP).
Technical Stack
- Next-generation firewalls
- DNS security (Cisco & Palo Alto Networks)
- DDoS protection (Akamai Prolexic)
- Wireless security (Cisco Meraki)
- VPNs
- SD-WAN technologies
- Intrusion Prevention Systems (IPS)
- SSL/TLS decryption
Team & Environment
You will be part of the Network Security Team, working across all operating companies.
Benefits & Compensation
- Compensation range: $5,444.76 - $9,537.00 Monthly
- Health insurance
- Dental insurance
- Vision insurance
- Paid time off
- Life insurance
- 401(k) with company match
- Mental health coverage
- Gender affirming and family building benefits
- Paid parental leave
- Associate discounts
- Community involvement opportunities
Work Mode
This is a remote position open to candidates in the United States.
The Company is an equal opportunity employer as well as a government contractor that shall abide by the requirements prohibiting discrimination against qualified protected Veterans and qualified individuals on the basis of disability.
