Senior Network Security Engineer
The Role
As a Senior Network Security Engineer, you will play a critical role in designing, implementing, and optimizing a hyperscale network security infrastructure.
As a technical leader, you will oversee complex security architecture initiatives, mentor peer engineers, act as an escalation point for incident response, and ensure alignment with modern security standards. The technology roadmap is heavily focused on automation, so experience with — and interest in — leveraging automation is essential.
Key Responsibilities
-
Mentor junior and mid-level engineers, providing guidance on complex troubleshooting and architectural decisions
-
Design, implement, and manage advanced network security solutions including firewalls, proxies, system hardening, threat profiling, and segmentation strategies to protect sensitive data
-
Act as a lead escalation point for critical security incidents and response efforts
-
Develop and maintain automation playbooks, network security policy frameworks, threat models, and root cause analyses with corrective actions
-
Oversee vulnerability assessments, penetration testing coordination, and remediation planning
-
Champion the use of automated tools for infrastructure build, day-two operations, and lifecycle management using technologies such as Python, Terraform, and vendor APIs
-
Leverage platforms and tools including Algosec, Tufin, Jenkins, and Git
-
Collaborate closely with infrastructure, DevOps, and application teams to embed security best practices across the technology stack
Required Skills & Experience
-
Extensive experience in network engineering and network security engineering, including architectural design across trusted, untrusted, and DMZ environments
-
Proven leadership experience in a senior or lead engineering role, with the ability to both guide teams and operate independently
-
Strong understanding of network protocols and the OSI model, with hands-on experience in TCP/UDP-based applications, routing, switching, and load balancing
-
Deep expertise in network security technologies, including firewalls, VPNs, proxies, MACsec, IPsec, HTTPS, certificate chains, DNS, NTP, AAA, and domain-based authentication and authorization
-
Experience working with multiple security vendors such as Palo Alto, Fortinet, Check Point, and F5
-
Strong understanding of Zero Trust principles, segmentation strategies, and secure cloud networking in AWS and/or Azure
-
Experience with scripting and automation tools such as Python, Ansible, or Terraform
-
Relevant certifications (CISSP, CCIE Security, GIAC, Palo Alto, Fortinet, or equivalent) are highly preferred
Nice-to-Have Experience
-
Core network experience with VXLAN EVPN data center architectures
-
Experience supporting hybrid or multi-cloud environments
-
Prior involvement in M&A technical integrations
-
Experience building or supporting SOC capabilities or working with MSSPs
-
Strong written and verbal communication skills
-
Firewall automation experience