Apply on Employer Site

AEG Vision · 1 month ago

Sr. Network & Security Engineer

Addison, TX, 75001, United States

Full-time

Onsite

Senior Level

AEG Vision is focused on providing innovative solutions in the field of vision care. The Sr. Network and Security Engineer will implement network strategies to support business needs securely and cost-effectively, while performing administration, support, and troubleshooting of various technologies.

Health CareHome Health CareHospitalMedicalMedical Device

Responsibilities

Design, implement, and support Fortinet firewalls (FortiGate), VPNs, security policies, HA, and micro-segmentation

Manage FortiSwitch and FortiAP environments including VLANs, Wi-Fi, QoS, and secure segmentation

Utilize FortiAnalyzer and FortiManager for centralized logging, reporting, and configuration management

Support FortiMail for secure email, anti-phishing, and anti-spam

Build and maintain Fortinet SD-WAN for multi-site connectivity and carrier diversity

Administer Cato VPN / Cato SASE for user and site connectivity

Engineer multi-carrier BGP for high availability, redundancy, and traffic engineering

Troubleshoot complex connectivity issues across sites, cloud, and remote users

Support Cisco MDS Fibre Channel switches, zoning, and fabric management

Collaborate with storage/server teams to ensure reliable SAN performance

Configure and support F5 load balancers including VIPs, pools, SSL offload, and monitoring

Manage Kemp LoadMaster appliances for internal and external workloads

Partner with application owners to design highly available, load-balanced solutions

Support VMware networking (vSphere, vCenter, vDS, NSX), VLANs, routing, and micro-segmentation

Assist with performance tuning and capacity planning

Configure Cloudflare DNS, WAF, Zero Trust, CDN, and DDoS protections

Optimize Cloudflare rules to enhance both security and performance

Maintain LogicMonitor (or similar tools) for monitoring and alerting

Build observability across SNMP, NetFlow/sFlow/IPFIX, syslog, and dashboards

Support CrowdStrike endpoint protection and coordinated remediation

Onboard log sources into a next-gen SIEM and fine-tune alerts, correlation rules, dashboards, and detection workflows

Contribute to network/SOC runbooks, standards, and escalation paths for 24×7 monitoring

Act as Tier 3/4 escalation for complex network and security incidents

Manage incidents, changes, and problems using ITSM tools (e.g., Zendesk)

Document network topologies, design standards, IP schema, and firewall/SD-WAN policies

Create knowledge base articles and support documentation for operational excellence

Participate in an on-call rotation and support after-hours deployments

Work closely with teams across cloud, security, DevOps, helpdesk, field services, and application groups

Translate technical concepts into clear communications for both technical and non-technical audiences

Qualification

Fortinet firewallsCato VPNCisco MDSF5 load balancersVMware networkingCloudflareLogicMonitorITSM toolsCross-functional collaborationDocumentation

Required