Network Security Engineer - Onsite

Kforce's client is looking for a Network Security Engineer in either New York, NY or Boston, MA. This role will be onsite. Summary: This is a hands-on engineering role for someone who enjoys building, operating, and improving security controls across modern infrastructure - from traditional networks to cloud and identity-driven environments.You'll work across network, endpoint, email, identity, data, and cloud security, partnering closely with infrastructure and security teams to design resilient, scalable defenses. Duties:

• Design, implement, and operate network security controls including firewalls, VPNs, IDS/IPS, and network segmentation
• Monitor and analyze network traffic to detect threats and anomalous behavior
• Define and maintain security standards, policies, and architectures for enterprise networks
• Manage secure email gateways to protect against phishing, malware, and other email-based attacks
• Implement encryption and authentication controls for email systems
• Deploy and manage endpoint security tooling such as EDR, antivirus, and DLP
• Respond to and remediate endpoint security incidents
• Run vulnerability scanning and assessment programs
• Partner with IT and engineering teams to prioritize remediation based on risk
• Track remediation progress and communicate status clearly
• Implement and maintain security controls across cloud platforms such as AWS and Azure
• Help secure cloud infrastructure, applications, and services in hybrid environments
• Contribute to cloud security best practices and guardrails
• Script and automate security workflows to improve efficiency and reliability
• Support incident response and investigations when security events occur
• Contribute to documentation, architecture standards, and continuous improvement efforts
• 6+ years of experience in network, infrastructure, or security engineering roles
• Strong understanding of IP networking (TCP/IP, routing, switching, VLANs, DNS, DHCP, NAT)
• Experience with next-generation firewalls and Layer 7 traffic inspection
• Solid knowledge of cryptography concepts (TLS/SSL, VPNs, PKI, encryption)
• Familiarity with modern attack techniques (phishing, ransomware, malware, DDoS, MITM, web attacks) and defensive controls
• Experience securing cloud environments and modern infrastructure technologies (virtualization, SaaS, PaaS, containers)
• Hands-on experience with Windows and Linux environments
• Interest and ability to code or script for automation and operational efficiency
• Strong communication skills and ability to work collaboratively in a global team
• Can combine deep technical fundamentals with curiosity, automation mindset, and a strong sense of ownership

• Work on security challenges at enterprise scale in a highly visible environment
• Broad exposure across network, cloud, endpoint, identity, and email security
• Opportunity to influence how security is designed and implemented across the organization
• Collaborative culture that values learning, ownership, and technical excellence
• Stable, in-office team environment with strong peer partnership and knowledge sharing