Lead Network Security Engineer

Who are we hiring?

The Lead Network Security Engineer supports IT Security services design, solution selection and configuration, technology delivery and long-term platform evolution. The Engineer will support developing complex technical security capabilities and automation which enables the organization to efficiently implement the controls, governance and protection that is needed to ensure the company’s assets are secure. The Lead Network Security Engineer will work with various application architectures and frameworks and efficiently translate application related requirements and outcomes to the security service catalog and capabilities. The Lead Network Security Engineer plays a critical role in influencing the technical direction of the organization and protecting its digital interests.

 What will you do?

• Evaluate and Optimize Network Security Solutions: Review existing and future security solutions, including hardware, software, and services, with a focus on advanced networking tools.
• Define and Enforce Security Policies: Create and maintain policies and procedures that ensure secure network practices while adhering to industry standards.
• Lead Network Security Projects: Drive the specification, validation, and implementation of network security products and services, including design, evaluation, and full lifecycle delivery.
• Deploy and Manage Cisco and Palo Alto Firewalls: Configure, maintain, and troubleshoot complex firewall environments to protect against threats and ensure robust network performance.
• Provide Expert-Level Network Troubleshooting: Act as the top escalation point for resolving operational issues and security incidents.
• Participate in Technical Audits: Collaborate with governance teams to support audits and compliance reviews, ensuring network security alignment with organizational goals.
• Develop and Maintain Network Recovery Plans: Design and implement recovery and business continuity strategies for network security infrastructure to ensure resilience against disruptions.
• Drive Automation in Network Security: Leverage tools and techniques to automate network security processes, reducing manual interventions and optimizing efficiency.
• Collaborate on Security Roadmaps: Work with security architects and technology leaders to define a long-term roadmap for network security technologies.
• Responsible for designing the technology implementation and delivery approach that expands past just the product aspect but includes training operations, documentation, updating the knowledge base and providing post implementation support.
• Acts as the L3 escalation point for operational issues and security incidents with some operational responsibilities as the need arises.
• Drives hyper-automation into all security products and services ensuring minimal human engagement is necessary to deliver desired outcomes.
• Leverages partners, cloud services and other resources to lead with an "automation first – cloud first" mentality. Must be able to design for the future.

What do you need to succeed?

• Bachelor’s degree in related field required and associated professional certifications preferred (Cisco Certified Network Professional (CCNP) Security), Palo Alto Networks Certified Network Security Engineer (PCNSE), AWS Certified Solution Architect)
• 10+ years of hands-on experience in network security engineering, with a strong focus on Cisco networking and Palo Alto firewall technologies.
• 7+ years of operationalizing network security services and technologies, including firewall rule optimization and advanced troubleshooting.
• 8+ years of experience working with the market leading cloud providers (Amazon AWS, Microsoft Azure and Google Cloud)
• 8+ years of security engineering experience inclusive of cloud security, network security, application security, and vulnerability management
• 7+ years of integration experience – hands on keyboard experience developing integrated technologies with authentication and authorization platforms, scheduling platforms and enabling on-prem and off-prem systems to work together

#LI-Onsite