Senior Lead Engineer, Cybersecurity, Network Security
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
Skills
access controlawsazureciscocisspcloud networkingdhcpdnsencryptionenterprise architecturefirewallsincident responseinfrastructure as codenetwork architecturenetwork designnetwork protocolsnetwork securitynisttcp/ipvpnvulnerability managementzero trust
About the role
Work Flexibility: Hybrid
Position Summary
Designs, implements, and supports enterprise network security technologies that protect organizational infrastructure from cyber threats — managing firewalls, secure remote access, network segmentation, intrusion prevention, secure DNS, VPN, and cloud networking security in partnership with infrastructure and cybersecurity teams.
What will you do:
- Design, engineer, and continuously improve enterprise network security solutions protecting Internet-facing, extranet, third-party, and internal environments, including next-generation firewalls, VPN, IDS/IPS, secure web gateways, DNS security, NAC, DDoS protection, and micro-segmentation.
- Develop secure network architectures supporting data centers, cloud environments (AWS, Azure, Google Cloud), remote workforce connectivity, and manufacturing locations.
- Partner with Enterprise Architecture to align network designs with Zero Trust principles and enterprise cybersecurity standards.
- Engineer secure network segmentation strategies, security zones, and trust boundaries for Internet-facing applications, DMZs, extranets, third-party connectivity, and internal environments to reduce attack surfaces and limit lateral movement. Develop, review, and optimize firewall policies, security rules, access control lists, and routing configurations per corporate standards.
- Perform network security assessments, configuration reviews, and architecture evaluations to identify gaps and recommend improvements.
- Lead implementation of new network security technologies, platform upgrades, migrations, and infrastructure modernization initiatives.
- Monitor network security platforms, investigate security events, and support Security Operations during incident response and containment.
- Partner with Vulnerability Management to remediate infrastructure vulnerabilities and apply timely patches and firmware updates.
- Develop automation using scripting, APIs, and infrastructure-as-code to improve operational efficiency.
- Create and maintain network security standards, architecture diagrams, engineering documentation, procedures, and configuration baselines.
- Evaluate emerging network security technologies, vendor solutions, and industry best practices.
What you need:
- Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering, or a related discipline required; Master's degree preferred.
- Certifications preferred: CCNP Security, CCIE Security, Palo Alto PCNSE, Fortinet NSE, Check Point CCSA/CCSE, CISSP, or equivalent.
- Advanced training in enterprise and cloud networking, Zero Trust Architecture, software-defined networking, firewall engineering, and secure network design preferred.
Qualifications & experience
- Minimum 6 years of enterprise network security experience.
- Experience designing or reviewing DMZ, extranet, Internet-facing application, and third-party connectivity architectures, including security zones, trust boundaries, firewall policy, permitted traffic flows, management access, encryption, and compensating controls.
- Administering Palo Alto, Cisco, Check Point, Fortinet, or similar firewall technologies.
- Experience with VPN, IDS/IPS, NAC, DNS security, and cloud networking.
- Experience supporting Azure, AWS, or Google Cloud networking.
- Knowledge of routing, switching, TCP/IP, DNS, DHCP, and network protocols.
- Familiarity with NIST CSF and CIS Controls.