Level 2 Network & Systems Engineer (Cybersecurity Focus)
Location: New York City, NY (On-site; hybrid potential after probationary period)
Summary:
We are looking for an IT professional to join our NYC-based IT infrastructure services team as a Level 2 Network/Systems Engineer working in the cybersecurity division. In this Level 2 technical role, you will design, implement, and support complex network and server solutions for our clients, while ensuring security best practices are at the forefront. You'll act as a technical lead on projects, handle advanced support escalations, and mentor junior engineers. On-site work in New York City (5 days/week initially) is required to interface with the team members, though some remote flexibility is offered after the probationary period. This position offers the opportunity to work on diverse engagements (from network upgrades and cloud migrations to security hardening projects) in a growing company. We value engineers who are not only technically skilled but also excellent and client communication and documentation.
Cybersecurity is central to this engineering role – you'll be entrusted with securing network and server infrastructures against threats. As a Level 2 Engineer, you will combine hands-on IT infrastructure work with a security-first mindset, implementing best practices to protect client systems.
Roles within Position:
- Project engineer leading technical implementations
- Cybersecurity analyst detecting and responding to threats
- Remote and onsite support engineer for complex client issues
- Cybersecurity consultant providing expert guidance
- Lead for small projects from inception to completion
- Program management for coordinated technical initiatives
Key Responsibilities:
- Network & Systems Engineering: Design, deploy, and maintain network infrastructures (LAN/WAN, Wi-Fi) and server environments for multiple clients. This includes configuring and managing switches, routers, and firewalls (primarily Cisco and HP/Aruba hardware) as well as Windows and Linux servers, virtualization platforms (VMware vSphere), and cloud services integration. Ensure high availability, scalability, and security in all implementations.
- Cybersecurity Implementation: Serve as a champion of security within the engineering team. Implement and manage advanced security measures such as next-gen firewalls, intrusion detection/prevention systems, VPN configurations, and identity/access management in client environments. Regularly review system and network configurations for compliance with security standards and remediate vulnerabilities promptly.
- Technical Support & Escalation: Act as a Tier-2/Tier-3 escalation point for complex network or system issues. Troubleshoot and resolve advanced problems (such as persistent connectivity issues, server failures, performance bottlenecks, security incidents) that Level 1 engineers cannot solve. Provide guidance and solutions, and interface with vendor support when necessary to tackle challenging problems.
- Performance Optimization: Perform network and system tuning and configuration changes to optimize performance and reliability. This may involve adjusting routing protocols, QoS settings, storage allocations, or virtualization resources based on analytics and monitoring data. Continuously seek improvements to reduce latency, increase efficiency, and bolster security (e.g., implementing traffic segmentation or zero-trust principles).
- Project Leadership: Lead and execute infrastructure projects from a technical standpoint. For example, you might architect and roll out a new multi-site network for a client, migrate a client's on-prem services to cloud platforms, or implement a company-wide security enhancement. Develop project scopes and task plans for your technical work, and coordinate with the Technical Project Manager to meet timelines.
- Documentation & Network Diagrams: Prepare and maintain comprehensive documentation for all systems and networks you design or modify. This includes network diagrams, device configurations, IP address schemas, and "as-built" documents to reflect current state. Also document procedures, troubleshooting runbooks, and security configurations so that both the team and the client have a clear record of the environment.
- Mentoring & Collaboration: Work closely with and mentor Level 1 engineers and other team members. Provide technical guidance, review their work, and help foster a knowledge-sharing culture. Collaborate with our Cybersecurity Analysts to jointly analyze threats or incidents and implement preventive measures.
- Client Engagement: Interface with clients in a professional manner during projects and support. Gather requirements, explain technical solutions in layman's terms when needed, and provide regular progress updates. As a consulting-focused engineer, you may also advise clients on improvements or new technologies that align with their business needs.
Prerequisite Skills Required:
- Education: Minimum of a Bachelor's degree in an engineering or technology discipline.
- Experience: 2+ years in IT field (i.e., helpdesk, security analyst, systems administration).
- Technical Expertise:
- Deep understanding of networking fundamentals
- Cloud infrastructure fundamentals
- Experience with IP networking (subnetting, VLANs, routing protocols, VPNs)
- Proficiency in Windows Server administration (Active Directory, Group Policy, DNS, DHCP)
- Professional Skills:
- Basic Excel proficiency
- Basic Word skills
- Strong email etiquette
- Strong communication skills in English
- Extensive experience working on different teams
- Leadership experience
- Cybersecurity Acumen: Solid understanding of cybersecurity principles and best practices in an infrastructure context. Knowledge about securing networks and operating systems – for example, hardening servers, implementing firewall rules, using IDS/IPS, vulnerability management, and incident response procedures.
- Problem-Solving & Leadership: Demonstrated problem-solving ability in high-pressure situations. Able to take ownership of complex tasks, work independently, and drive issues to resolution. Strong organizational skills to juggle multiple tasks/projects.
Skills to Develop in Role:
- VMware Environment Management:
- VM deployment
- Network management
- Host configuration and management
- Patch management
- Security baseline and assessment
- Network Administration:
- Basic troubleshooting of common network vendor technologies from: Cisco, Aruba/HP, Brocade
- Advanced routing and switching configuration
- Network security implementation
- Documentation & Communication:
- OneNote organization and knowledge base management
- Intermediate Microsoft Word for various reports and communication
- Client-facing documentation best practices
- Security & Analysis:
- Data analysis via Excel and/or programming languages (i.e., R/Pandas)
- Cybersecurity event analysis and reporting
- Vulnerability assessment and management
- Security control implementation
- Advanced Troubleshooting:
- Network infrastructure
- Systems infrastructure
- Cloud infrastructure troubleshooting
- Microsoft 365 administration and security
- Strong helpdesk troubleshooting for escalated issues
Preferred Qualifications:
- Certifications: CompTIA Security+ (or higher security certification), Cisco CCNA/CCNP, Microsoft or VMware certifications (e.g., MCSE, Azure Administrator, VCP).
- Advanced Security Skills: Experience with specific security tools (SIEM, endpoint protection platforms like CrowdStrike or SentinelOne, MFA, etc.). Ability to proactively identify security weaknesses and take corrective action.
- Automation Skills: Experience with automation or scripting (PowerShell, Python, Ansible, etc.) to automate repetitive tasks, deployments, or to gather system information.
- ITIL/Process Knowledge: Familiarity with ITIL or formal IT service management processes in areas like change management and incident management.
- Project Exposure: Experience serving as a technical lead on projects (even if informally) – for instance, having migrated an office's infrastructure, set up a new branch network, or implemented a security improvement plan.
- Soft Skills: A track record of effective teamwork and mentoring junior techs. An intrinsic customer service ethos – we highly value engineers who are personable and customer-focused.
Benefits:
- Competitive compensation package including base salary and performance incentives
- Support for further certifications and career growth
- Comprehensive health, dental, and vision insurance
- Paid time off and company holidays
- Career advancement opportunities in a growing organization
ABOUT US:
Promenet is a leading IT-consulting firm located in Manhattan's Financial District.
We seek to add valuable new full-time members to our team. We're responsible for the integrity of each of our clients' networks, and subsequently their business operations.
Please visit our website for more information: www.promenet.com
Thanks for your interest!
Job Type: Full-time
Pay: $70,000.00 - $85,000.00 per year
Benefits:
- Dental insurance
- Health insurance
- Paid time off
- Parental leave
- Professional development assistance
- Retirement plan
- Vision insurance
Work Location: Multiple locations
