Note: The job is a remote job and is open to candidates in USA. K&K Global Talent Solutions Inc. is an international recruiting agency that has been providing technical resources in the Canada and the USA region since 1993. They are seeking a Software Engineer/Network Engineer to design and maintain enterprise network architectures, manage system performance, and ensure cybersecurity compliance.
Responsibilities
- Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking)
- Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN)
- Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles
- Implement network telemetry, logging, and packet-capture visibility solutions
- Ensure network resiliency, redundancy, and capacity planning across environments
- Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, Google Cloud Platform VPCs)
- Perform network performance troubleshooting, service restoration, and RCA documentation
- Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX-OS upgrades
- Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V)
- Configure and optimize system performance, storage, virtualization, and backups
- Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, Google Cloud Platform equivalents)
- Deploy and manage containers, Kubernetes, orchestration systems
- Implement secure system baselines (CIS, NIST 800-53, DISA STIGs)
- Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management
- Support patching, OS hardening, system logging, FIM, vulnerability remediation
- Conduct performance and health monitoring of critical compute resources and services
- Integrate network/sys logs into SIEM platforms following CIM or standardized schema
- Implement network and system controls supporting ISO27001, or NIST RMF compliance
- Support incident response through data collection, log analysis, containment actions, and implementing compensating controls
- Manage access controls, least-privilege enforcement, and identity integrations for infrastructure
- Support audit evidence collection and configuration/state reporting
Skills
- Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN)
- Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet
- Expertise in firewalls, VPNs, network segmentation, IDS/IPS
- Cloud networking (AWS VPCs, PrivateLink, TGW; Azure VNets; Google Cloud Platform VPCs)
- Familiarity with SD-WAN, load balancing, and NAC solutions
- Linux and Windows administration expertise
- Virtualization platforms (VMware ESXi/vCenter, Hyper-V)
- Cloud systems management (AWS EC2/EBS/EFS/RDS; Azure IaaS; Google Cloud Platform Compute)
- Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO
- Containerization (Docker, Kubernetes, EKS/AKS/GKE)
- Knowledge of NIST 800-53, RMF, CIS benchmarks, DISA STIG hardening
- Experience integrating logs into SIEM platforms (Splunk, QRadar, Elastic)
- Familiarity with IAM, MFA, Zero Trust, segmentation models
- Ability to support SOC incident response activities
- Scripting skills: Python, Bash, PowerShell
- Automation: Ansible, Terraform, CloudFormation, GitLab CI/CD
- Knowledge of monitoring frameworks (Prometheus, Grafana, CloudWatch)
- Proficiency in leveraging Artificial Intelligence (AI) to drive innovation and efficiency within technical domains
- Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking)
- Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN)
- Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles
- Implement network telemetry, logging, and packet-capture visibility solutions
- Ensure network resiliency, redundancy, and capacity planning across environments
- Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, Google Cloud Platform VPCs)
- Perform network performance troubleshooting, service restoration, and RCA documentation
- Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX-OS upgrades
- Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V)
- Configure and optimize system performance, storage, virtualization, and backups
- Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, Google Cloud Platform equivalents)
- Deploy and manage containers, Kubernetes, orchestration systems
- Implement secure system baselines (CIS, NIST 800-53, DISA STIGs)
- Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management
- Support patching, OS hardening, system logging, FIM, vulnerability remediation
- Conduct performance and health monitoring of critical compute resources and services
- Integrate network/sys logs into SIEM platforms following CIM or standardized schema
- Implement network and system controls supporting ISO27001, or NIST RMF compliance
- Support incident response through data collection, log analysis, containment actions, and implementing compensating controls
- Manage access controls, least-privilege enforcement, and identity integrations for infrastructure
- Support audit evidence collection and configuration/state reporting
Company Overview