Role description
Network Security Engineer
GruveAbout Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
About the Role
The Network Security Engineer will join the US Solutions Delivery team, implementing and supporting enterprise firewall and network security solutions across customer environments. This is a hands-on, delivery-focused role centered on Cisco ASA and FTD platforms, and NGFW deployments. The engineer owns assigned workstreams end-to-end - from lab validation through production cutover — and works closely with architects, project managers, and customer stakeholders. The engineer should be US Citizen and willingness to travel is required.
Key Responsibilities
Firewall Deployment & Operations
- Implement and configure enterprise firewall and network security solutions (NGFW/FTD, VPNs, NAT, NAC/ISE, SASE) in alignment with approved designs
- Manage and maintain firewall policies, including access rules, NAT, objects, zones, and security profiles following best practices
- Perform testing and validation of firewall rules and security configurations in lab or staging environments before production deployment
Migration & Troubleshooting
- Support firewall migrations from Cisco ASA and third-party platforms to Cisco FTD
- Troubleshoot and resolve firewall and network security issues, including traffic drops, NAT issues, VPN failures, and routing/DNS/DHCP dependencies
- Identify and implement opportunities for optimization and automation, such as rule cleanup, standardization, and workflow improvements
Execution & Coordination
- Collaborate with architects, senior engineers, and project managers to ensure accurate and timely solution delivery
- Participate in project sync-ups and technical discussions to understand requirements, scope, and deployment sequencing
- Take ownership of assigned tasks end-to-end, including escalation, root cause analysis (RCA), and issue resolution
Documentation & Continuous Improvement
- Create and maintain comprehensive documentation, including firewall rules, network diagrams, VPN inventories, and operational runbooks
- Stay current on firewall platforms, SASE, Zero Trust, and network security practices, applying new learnings to day-to-day delivery work
Basic Qualifications
- Candidate should be a US citizen.
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field
- 4-7 years of experience in cybersecurity, with a strong focus on firewall design and implementation
- 3+ years of hands-on experience designing and implementing Cisco ASA and Cisco FTD firewall environments or any third-party firewalls such as Palo Alto/Fortinet/Checkpoint experience with limited Cisco Firewall experience.
- Proven expertise in troubleshooting firewall and VPN connectivity issues, including NAT, routing, and policy-related problems
- Good understanding of NGFW features such as malware protection, threat detection, URL filtering, SSL decryption, and Intrusion Prevention Systems (IPS); hands-on experience preferred
- Experience working with multi-instance firewall environments
- Strong understanding of core networking concepts: TCP/IP, DNS, DHCP, subnetting, NAT, VPNs, and routing/switching fundamentals
- Willingness to travel across the U.S. to support customer deployments and firewall rollouts.
Preferred Qualifications
- CCNP Security certification or equivalent demonstrated expertise
- Experience with Cisco Secure Access, Umbrella, or XDR platforms.
- Knowledge of Zero trust/SASE implementations.
- Knowledge of Cisco ISE for NAC/802.1X integration alongside firewall deployments
- Experience with security automation and scripting (Python, Ansible, APIs)
- CISSP, GIAC, or other industry-recognized security certifications
- Familiarity with compliance frameworks (PCI-DSS, HIPAA, SOC 2, NIST)
- Prior experience in a consulting, professional services, or partner-led delivery model
Salary Range
$80,000 - $150,000 USD + Benefits
This is a full-time role with Gruve. Please note that Gruve does not provide visa sponsorship for this position; candidates must be U.S. citizens to apply. This is an on-site role based in Edison, New Jersey.
Why Gruve
At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.
Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.