Network Specialist

##

- Position Name: Network Specialist
- Employment Type: Contractor (Extendable Based on Performance)
- Experience Required: 3-5 Years
- Joining Preference: Immediate joiners will be given preference and facilitated for expedited onboarding.

Position Summary

We are seeking a skilled Network Specialist with hands-on experience in network security implementation, segmentation, VPN technologies, and network access control. The ideal candidate will be responsible for assessing network exposure, implementing secure network boundaries, enforcing segmentation policies, and validating that approved traffic flows operate as intended. The role requires practical experience with ADVPN and Aruba ClearPass, as well as the ability to work across on-premises and hybrid cloud environments to strengthen network security and reduce the organization's attack surface.

Key Responsibilities

- Assess network exposure and identify traffic dependencies across sites, server environments, cloud platforms, guest networks, and vendor access networks.
- Define and document approved network boundaries for inter-site, server, cloud, guest, and vendor connectivity.
- Design and implement network segmentation controls to enforce approved traffic flows.
- Restrict inter-site connectivity and control ADVPN shortcut paths where required.
- Implement and maintain separation between production and non-production environments.
- Enforce security policies using firewalls, VPNs, Network Access Control (NAC) solutions, and host-based controls.
- Develop and maintain east-west traffic flow matrices and segmentation policies.
- Implement server farm micro-segmentation and secure server network architectures.
- Establish segregated access for guests, contractors, and third-party vendors.
- Configure and enforce device posture assessment and compliance validation controls.
- Review and remove unnecessary routing paths, firewall rules, and network access permissions.
- Establish owner-based reviews for firewall rules and network access controls.
- Address exposed test and non-production environments in collaboration with application and cloud owners.
- Validate approved business traffic while verifying that unauthorized network paths are blocked.
- Perform connectivity validation across sites and vessels where required.
- Maintain network security policies, configurations, implementation records, and testing evidence.
- Support attack surface monitoring activities and contribute to major network redesign initiatives.

Must-Have Skills

- 3-5 years of hands-on experience implementing network security technologies in enterprise environments.
- Hands-on experience with ADVPN (Adaptive Dynamic VPN) implementation, administration, and troubleshooting.
- Hands-on experience with Aruba ClearPass deployment, policy management, and administration.
- Strong experience implementing and managing firewall security policies and Access Control Lists (ACLs).
- Proven experience configuring and supporting VPN solutions.
- Hands-on experience with Network Access Control (NAC) technologies.
- Demonstrated experience implementing network segmentation and enforcing traffic restrictions.
- Experience working with hybrid connectivity environments.
- Experience validating production traffic and security controls after implementation.
- Ability to troubleshoot and resolve network security issues in production environments.
- Experience testing and proving policy enforcement through controlled validation exercises.

---

Good-to-Have Skills

- VLAN design, migration, and segmentation.
- Server network design and security architecture.
- Wi-Fi security implementation and management.
- VPN posture assessment and endpoint compliance validation.
- Internal segmentation projects and east-west traffic control.
- Server farm micro-segmentation.
- Guest wireless network isolation.
- Vendor and contractor access management.
- Segregated vendor VPN environments.
- Device posture checking and compliance enforcement.
- Non-production environment isolation and security controls.
- Azure networking and cloud boundary security.
- Google Cloud networking and cloud boundary security.
- Cross-cloud connectivity governance and traffic restriction.
- Routing optimization and network path analysis.
- Firewall rule optimization and cleanup initiatives.
- Traffic dependency analysis and flow mapping.
- Site and vessel connectivity validation.
- Security documentation, testing evidence, and compliance reporting.
- Attack surface monitoring and reduction initiatives.
- Experience participating in large-scale network transformation or redesign programs.
- Relevant firewall, VPN, NAC, Aruba, or network security certifications.