About the Role

The Network Security Engineer will join the US Solutions Delivery team, implementing and supporting enterprise firewall and network security solutions across customer environments. This is a hands-on, delivery-focused role centered on Cisco ASA and FTD platforms, and NGFW deployments. The engineer owns assigned workstreams end-to-end - from lab validation through production cutover — and works closely with architects, project managers, and customer stakeholders. The engineer should be US Citizen and willingness to travel is required. 

Key Responsibilities

Firewall Deployment & Operations 

• Implement and configure enterprise firewall and network security solutions (NGFW/FTD, VPNs, NAT, NAC/ISE, SASE) in alignment with approved designs 
• Manage and maintain firewall policies, including access rules, NAT, objects, zones, and security profiles following best practices 
• Perform testing and validation of firewall rules and security configurations in lab or staging environments before production deployment 

Migration & Troubleshooting 

• Support firewall migrations from Cisco ASA and third-party platforms to Cisco FTD 
• Troubleshoot and resolve firewall and network security issues, including traffic drops, NAT issues, VPN failures, and routing/DNS/DHCP dependencies 
• Identify and implement opportunities for optimization and automation, such as rule cleanup, standardization, and workflow improvements 

Execution & Coordination 

• Collaborate with architects, senior engineers, and project managers to ensure accurate and timely solution delivery 
• Participate in project sync-ups and technical discussions to understand requirements, scope, and deployment sequencing 
• Take ownership of assigned tasks end-to-end, including escalation, root cause analysis (RCA), and issue resolution 

Documentation & Continuous Improvement 

• Create and maintain comprehensive documentation, including firewall rules, network diagrams, VPN inventories, and operational runbooks 
• Stay current on firewall platforms, SASE, Zero Trust, and network security practices, applying new learnings to day-to-day delivery work 

Basic Qualifications

• Candidate should be a US citizen. 
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field 
• 5-7 years of experience in cybersecurity, with a strong focus on firewall design and implementation 
• 4+ years of hands-on experience designing and implementing Cisco ASA and Cisco FTD firewall environments or any third-party firewalls such as Palo Alto/Fortinet/Checkpoint experience with limited Cisco Firewall experience. 
• Proven expertise in troubleshooting firewall and VPN connectivity issues, including NAT, routing, and policy-related problems 
• Good understanding of NGFW features such as malware protection, threat detection, URL filtering, SSL decryption, and Intrusion Prevention Systems (IPS); hands-on experience preferred 
• Experience working with multi-instance firewall environments 
• Strong understanding of core networking concepts: TCP/IP, DNS, DHCP, subnetting, NAT, VPNs, and routing/switching fundamentals 
• Willingness to travel across the U.S. to support customer deployments and firewall rollouts. 

Preferred Qualifications

• CCNP Security certification or equivalent demonstrated expertise 
• Experience with Cisco Secure Access, Umbrella, or XDR platforms. 
• Knowledge of Zero trust/SASE implementations. 
• Knowledge of Cisco ISE for NAC/802.1X integration alongside firewall deployments 
• Experience with security automation and scripting (Python, Ansible, APIs) 
• CISSP, GIAC, or other industry-recognized security certifications 
• Familiarity with compliance frameworks (PCI-DSS, HIPAA, SOC 2, NIST) 
• Prior experience in a consulting, professional services, or partner-led delivery model 

Salary Range 

$90,000 - $140,000 USD + Benefits 

This is a full-time role with Gruve. Please note that Gruve does not provide visa sponsorship for this position; candidates must be U.S. citizens to apply. This is an on-site role based in Edison, New Jersey. 

‍

About the Role

The Network Security Engineer will join the US Solutions Delivery team, specializing in Cisco Identity Services Engine (ISE) and Network Access Control (NAC) deployments across enterprise customer environments. This is a hands-on, delivery-focused role centered on designing, implementing, and troubleshooting Cisco ISE-based NAC solutions including 802.1X, MAB, posture assessment, profiling, and guest services. The engineer also supports Cisco firewall platforms (ASA and FTD/NGFW) as a secondary discipline. The role owns assigned workstreams end-to-end — from lab validation through production cutovers — and works closely with architects, project managers, and customer stakeholders. 

Key Responsibilities

Cisco ISE / NAC Deployment & Operations  

• Design, deploy, and configure Cisco ISE for 802.1X wired/wireless, MAB, and CWA; manage policy sets, authentication/authorization, profiling, posture, and guest workflows end-to-end 
• Integrate ISE with Active Directory, LDAP, PKI/CA, and MFA; manage distributed ISE deployments (PAN, PSN, MnT) with HA and scalability; deploy RADIUS/TACACS+ for network device administration 
• Configure endpoint compliance/posture modules (AV, patch, OS); manage guest, sponsor portals, and BYOD onboarding; support TrustSec (SGT/SXP) segmentation 
• Troubleshoot RADIUS failures, authentication timeouts, profiling inconsistencies, and policy mismatches with root cause analysis 

Cisco Firewall Deployment & Operations: 

• Design, implement, and configure Cisco FTD and ASA firewalls, including HA setups and scalable architectures 
• Manage and optimize access control rules, NAT, security zones, and NGFW features IPS/IDS, URL filtering, Malware Policy, SSL decryption, and VPN (SSL/IPSec) 
• Troubleshoot firewall and VPN connectivity issues including NAT, routing, SSL/IPSec VPN failures, and policy-related problems 

Execution & Coordination 

• Collaborate with architects, senior engineers, and project managers to ensure accurate, timely solution delivery, while actively participating in project discussions to understand requirements, scope, and deployment sequencing 
• Take end-to-end ownership of assigned tasks, including escalation, root cause analysis (RCA), and issue resolution  

Documentation & Continuous Improvement 

• Create and maintain comprehensive documentation including ISE policy matrices, network access diagrams, RADIUS/TACACS inventories, and operational runbooks 
• Document firewall rules, VPN inventories, NAT tables, and change records for audit and compliance purposes 
• Stay current on Cisco ISE releases, NAC trends, Zero Trust Network Access (ZTNA), and SASE architectures, applying new learnings to delivery work 

Basic Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field 
• 3–5 years of cybersecurity experience with a strong focus on NAC and identity-based access control; 3+ years hands-on with Cisco ISE or similar NAC solutions (e.g., FortiNAC, Aruba ClearPass) 
• Strong knowledge of 802.1X (EAP-TLS, PEAP, TEAP), certificate-based authentication, and integrations with AD, LDAP, PKI, and RADIUS/TACACS+ 
• 3+ years of hands-on experience with Cisco ASA/FTD firewalls (NGFW, VPN, NAT) or equivalent experience with third-party firewalls (Palo Alto, Fortinet, Check Point) 
• Solid understanding of networking fundamentals: TCP/IP, DNS, DHCP, VLANs, trunking, and routing/switching 
• Experience with Cisco Catalyst/Nexus switches for NAC enforcement (802.1X, MAB) 
• Willingness to travel across the U.S. to support deployments 

Preferred Qualifications

• CCNP Security or equivalent certification (ISE/NAC specialization preferred); CISSP, GIAC, or other security certifications a plus 
• Experience with TrustSec/SGT/SXP, DUO MFA/ZTNA integration, Cisco Umbrella, and Cisco XDR 
• Familiarity with SASE/Zero Trust architectures and security automation (Python, Ansible, APIs) 
• Knowledge of compliance frameworks (PCI-DSS, HIPAA, SOC 2, NIST); prior consulting or professional services experience preferred. 

Salary Range 

$65,000 - $110,000 USD + Benefits 

This is a full-time position with Gruve and is based onsite at our Edison, New Jersey office & Plano, Dallas Office. Please note that Gruve does not provide visa sponsorship for this role; candidates must be U.S. citizens.

‍

About the Role

The Solutions Architect will be part of the US Solution Delivery team and is responsible for designing, deploying, and operationalizing enterprise-scale Red Hat platforms including OpenShift, Ansible Automation Platform, and RHEL across hybrid and multi-cloud environments. This role is delivery-focused and platform-first — combining deep technical architecture with hands-on engineering oversight. The architect ensures platform security, scalability, and Day-2 readiness, while preparing the environment for AI-native evolution and Secure AI Factory integration.

Key Responsibilities

Architecture & Platform Ownership

• Architect end-to-end OpenShift, AAP, and RHEL deployments across hybrid and multi-cloud environments
• Define platform landing zones, cluster topology, multi-tenancy boundaries, and trust zones
• Produce HLD/LLD emphasizing resiliency, GitOps alignment, and Day-2 operability
• Design secure workload onboarding models (CI/CD patterns, image/registry governance, namespace guardrails)
• Architect storage and data layer integration (ODF/CSI drivers) based on workload profiles
• Govern identity and policy integration (RBAC, OIDC/LDAP, service mesh/east-west security)
• Serve as platform design authority ensuring delivery aligns with Red Hat architecture standards

Platform Engineering & Day-2 Operations

• Deploy and operationalize OpenShift clusters including install, scaling, operators, and lifecycle governance
• Implement Day-2 automation via GitOps/Ansible for upgrades, drift prevention, health remediation, and cert rotation
• Build observability and SRE operability (logging/metrics/tracing, RCA workflows, HA validation)
• Govern resource quotas, tenancy, security posture, and workload placement
• Enable disaster recovery/backup strategies and continuity planning for cluster + workloads
• Standardize IaC/GitOps pipelines to ensure consistent platform configuration across environments

Customer Consulting & Technical Leadership

• Act as a trusted advisor to enterprise platform, DevOps, and cloud engineering teams
• Partner with presales / solution engineering to validate sizing, feasibility, and deployment readiness
• Mentor platform engineers to uplift architecture discipline and Day-2 maturity
• Develop reusable platform baselines, reference patterns, and architectural collateral

Secure AI Factory & Next-Gen Alignment

• Prepare OpenShift environments for AI-native security and Secure AI Factory adoption
• Build capability alignment with Cisco AI Fabric, Cisco AI Defense, and Cisco Hypershield
• Support convergence of OpenShift + AI security + automation fabric for secure workload design
• Mature deployments toward AI-assisted Day-2 ops and adaptive policy enforcement

Required Qualifications

• 8+ years in platform engineering, infrastructure delivery, or architecture roles
• 4+ years deploying or architecting OpenShift and/or Ansible in production
• Strong knowledge of Linux, containers, platform security, networking, TLS/PKI, HA/DR
• Hands-on with DevSecOps, GitOps, IaC, and automation frameworks
• Proven experience in customer-facing architecture or consulting leadership

Preferred Skills

• Red Hat certifications (RHCE, EX280, AAP Specialist or equivalent)
• Experience with multi-cluster/multi-tenant architecture
• Familiarity with service mesh / east-west security / workload isolation
• Understanding of AI-native security models and Secure AI Factory adoption path

Why This Role Matters

This role transitions customers from infrastructure-centric environments into modern Red Hat platform architectures that are secure, cloud-native, automation-driven, and future-ready for AI-assisted operations. It ensures platforms are not only deployed — but architected for long-term resilience, policy governance, and intelligent Day-2 operation.

Salary Range

$140,000 to $170,000 USD annually

This is a full-time opportunity with Gruve. It is an on-site role based in Edison, New Jersey.

This position will perform multiple job functions and is responsible for assisting with the design, deployment, monitoring, maintenance, operation, and repair of production equipment systems for our World Feed Broadcast and Engineering team.

Responsibilities

• Have a full understanding of technical facilities and complex broadcast production equipment systems on-prem and in the cloud, as well as computer and intercom skills in a Broadcast Engineering environment.
• Ability to rapidly diagnose problems and provide alternative solutions to maintain production deadlines.
• Ability to comprehend complex concepts and workflows, including remote and cloud productions.
• Will work with the NFL World Feed Operations team for the proper transmission and receipt of feeds for live remote cloud productions
• Participate and contribute to the training and ongoing education of production personnel on operating equipment and systems.
• The employee must be able to work evening and weekend shifts during the NFL season.
• The employee may be required to work a flexible rotating 24/7 shift.

Required Qualifications

• 5 or more years of experience in maintaining professional Video and Audio Post Production and Broadcast systems. Hands-on management and maintenance of Audio, Video, Grading, Graphics, Transcode, Storage, Client and VM systems, network infrastructure, and broadcast systems. Experience in professional Video and Audio system development and deployment utilizing current tools.
• Team leadership and management experience.
• Experience in a broadcast operations environment including 2110, HD/SD, ASI, JPEG, SRT, and MPLS signals and the ability to troubleshoot those signal paths
• Assist in development efforts around new and emerging Post Production, Media management, and Broadcast processes.
• Assist engineers and operators in designing, developing, and deploying new systems and processes.
• Assist in road map planning across multiple media systems and environments.
• Provide technical expertise and leadership across multiple systems and technologies.
• Provide hands-on support for a wide array of Post and Broadcast systems.

Skills -- Computer/Storage/Networking/Applications 

• Knowledge of data networking
• Must have proficient computer skills in Windows, Mac, and Linux operating systems.
• Knowledge of current video and audio editing systems
• Knowledge of graphics (Adobe Creative Suite)
• Knowledge of BlackMagic DaVinci Resolve

At least 5 years of experience utilizing the aforementioned skill set to support a broadcast television production, post-production facility, or remote engineering situations. Must be able to work successfully in a network-based broadcast environment.

Preferred Qualifications (Not all are required)

• BA/BS
• 5+ years of experience in Video, Audio, and Post Engineering
• Very strong computer or networking skills.
• Ansible Orchestration and Kubernetes Deployments
• Knowledge of SMPTE 2110 systems

Skills -- General 

• Strong communication skills
• Ability to express complex concepts verbally and in written documentation.
• Ability to work alone or as part of a team.
• Ability to maintain a high level of professionalism and motivation.
• Ability to maintain knowledge of technology and industry trends.

Physical Demands

• Must be able to lift heavy equipment for installation and maintenance service as required.

Travel

• Does not require travel.

Terms / Expected Hours of Work

• NFL employees are required to work 40 hours per week. The role may require overtime (time worked more than 40 hours) and/or weekends.
• The NFL is committed to building a diverse, equitable, and inclusive work environment that reflects our diverse fan base. We provide an environment of mutual respect where equal employment opportunities are available to all employees and applicants without regard to status as protected by applicable federal, state, or local law.