Network Security Monitoring Lead Engineer

Network Security Monitoring Lead Engineer

Job Description

Lead Engineer – Network Security Monitoring

About you:
4-year degree or equivalent experience
8+ years of network engineering, network visibility architecture, or network security engineering
Experience designing and operating large-scale telemetry/visibility platforms (high-throughput packet capture, sensor fleets, log pipelines)
Strong experience administering Linux (RHEL/CentOS, Ubuntu, or equivalent)
Proven experience designing and operating enterprise configuration management and orchestration tools (e.g., Ansible, Salt, Puppet, Chef, Terraform, etc.)
Demonstrates expertise in analysis and optimization of systems capacity, performance, and operational health
Ability to diagnose issues across system, application, and network layers
Experience working in production environments with change control and operational discipline
Solid understanding of TCP/IP, routing protocols, VLANs, NAT, DNS, DHCP, and firewall concepts
Scripting experience (Python, Bash, or similar) for automation and tooling
Effectively communicate engineering solutions through detailed high- and low-level diagrams and documentation

Your Mission:

Evaluate the current configuration management and orchestration environment, identifying gaps, risks, and opportunities for improvement. Based on your findings, design a modern, scalable solution and drive its end-to-end implementation from architecture through rollout to ensure a secure, reliable, and efficient operational foundation.
Define client-state architecture and engineering standards (patterns, guardrails, CI/CD, configuration governance) for the NSM platform.
Lead design reviews and architectural decision records (ADRs); ensure solutions meet security, reliability, and operability requirements.

Additional skills we are interested in:
Experience with optimizing the performance of: Security Onion, Zeek, Suricata, Snort
Experience developing monitoring/testing frameworks
Proficiency analyzing data within: Kibana, Splunk, Graylog
Experience with: Linux, Docker, Git
Practical experience with network packet analysis tools (Wireshark, tcpdump, etc.)

Notes:

Hybrid

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.