Senior Network Security Engineer

Network Security Engineer

Overview

A leading global financial services organization is seeking a Network Security Engineer to join its Information Security and Infrastructure teams. This position will be responsible for the design, implementation, administration, and continuous improvement of network security technologies that protect critical business systems, cloud platforms, market-facing applications, and enterprise infrastructure.

The ideal candidate will possess a strong background in firewall administration, network security architecture, cloud security, threat prevention, and secure network operations within a highly regulated environment. This individual will partner closely with cybersecurity, infrastructure, cloud, networking, and application teams to strengthen the organization’s security posture while supporting business growth and operational stability.

Key Responsibilities

Network Security Engineering

• Design, implement, and maintain enterprise network security controls across corporate, cloud, and data center environments.
• Administer and optimize next-generation firewalls, VPN technologies, intrusion detection and prevention systems, secure web gateways, and network access controls.
• Develop and maintain network segmentation strategies that support security, compliance, and operational requirements.
• Review and approve network security changes, firewall rules, VPN configurations, and routing modifications.
• Evaluate new technologies and recommend solutions that improve network security, visibility, and operational efficiency.

Security Architecture & Infrastructure Protection

• Participate in architecture reviews and provide security guidance for network, cloud, and application initiatives.
• Design secure connectivity solutions for cloud platforms, branch offices, third-party vendors, and remote users.
• Support implementation of Zero Trust and defense-in-depth security architectures.
• Ensure security controls are aligned with organizational standards, regulatory requirements, and industry best practices.

Monitoring & Threat Detection

• Monitor network security events and investigate suspicious activity.
• Tune and optimize security monitoring tools to improve threat detection and reduce false positives.
• Assist with threat hunting, forensic investigations, and incident response activities.
• Develop reporting and dashboards that provide visibility into network security posture and operational risk.

Vulnerability & Risk Management

• Conduct network security assessments and identify vulnerabilities within enterprise infrastructure.
• Partner with infrastructure teams to prioritize remediation and reduce risk exposure.
• Evaluate security risks associated with network changes, cloud deployments, and third-party integrations.
• Provide recommendations for mitigating identified threats and vulnerabilities.

Cloud & Hybrid Security

• Secure connectivity between on-premises infrastructure and cloud environments.
• Support security controls within Microsoft Azure and Microsoft 365 environments.
• Implement secure access controls, network monitoring, and cloud security best practices.
• Partner with cloud engineering teams to ensure consistent security standards across hybrid environments.

Governance, Compliance & Documentation

• Develop and maintain network security standards, procedures, and technical documentation.
• Support internal audits, regulatory examinations, penetration tests, and security assessments.
• Assist with compliance initiatives aligned to frameworks such as NIST, CIS Controls, ISO 27001, and financial services cybersecurity requirements.
• Maintain accurate documentation of network architecture, security controls, and operational procedures.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent professional experience.
• 5+ years of experience in network security engineering, network infrastructure, or cybersecurity roles.
• Strong experience administering enterprise firewall platforms such as Palo Alto, Check Point, Cisco Firepower, or Fortinet.
• Hands-on experience supporting VPN technologies, network segmentation, IDS/IPS solutions, proxy technologies, and secure remote access platforms.
• Strong understanding of TCP/IP, DNS, DHCP, BGP, OSPF, routing, switching, and network troubleshooting.
• Experience with network packet analysi…