IT Security Senior Engineer

The IT Security Senior Engineer will provide advanced engineering expertise and technical leadership to strengthen enterprise network security across cloud and on-premises environments. This role is central to designing secure, scalable, and resilient infrastructure while advancing Zero Trust security strategies. The successful candidate will lead complex security initiatives, modernize network protection capabilities, and improve visibility, detection, and incident response. Working closely with platform engineering, IT, and business stakeholders, the engineer will drive automation, secure-by-design practices, and operational excellence. The position also involves mentoring engineering teams, shaping technical standards, and guiding architecture decisions across the organization. This is a remote opportunity suited to a highly experienced security professional who combines deep technical knowledge with strategic thinking and collaborative leadership.

• Lead the design of secure architectures for LAN/WAN, hybrid cloud, and SaaS environments, establishing reusable reference patterns and standards.

• Own medium-to-large security initiatives, including network segmentation, SASE expansion, and firewall modernization, from design through implementation.

• Contribute to long-term security roadmaps by identifying gaps, reducing technical debt, and aligning infrastructure with Zero Trust objectives.

• Engineer and optimize enterprise firewall and web application firewall (WAF) capabilities, DDoS protection, API security patterns, and load-balancing controls.

• Design and implement Azure networking and security architectures at scale, including hub-and-spoke connectivity, shared services, private connectivity, routing strategies, and resiliency patterns.

• Implement and operationalize microsegmentation strategies, integrating identity and endpoint signals into access and enforcement policies.

• Lead integrations with telemetry, logging, security information and event management (SIEM), and network detection and response (NDR) tools to improve visibility and threat detection.

• Serve as a Level 3 escalation point for high-severity security incidents, coordinating technical response and ensuring timely mitigation.

• Lead root-cause analyses, produce post-incident reports, and drive long-term remediation and resilience improvements.

• Establish and improve operational runbooks, reliability practices, monitoring, and performance metrics for managed platforms.

• Strengthen on-call readiness and promote consistent operational standards across security engineering teams.

• Define automation standards for network and security workflows, developing reusable modules and safeguards to support safe, consistent changes.

• Collaborate with platform engineering to integrate secure connectivity controls into CI/CD pipelines and infrastructure-as-code workflows.

• Apply scripting and automation to improve efficiency, repeatability, and security governance.

• Mentor engineers in secure architecture, troubleshooting, and engineering best practices.

• Conduct technical reviews and provide guidance on complex security designs and implementation decisions.

• Communicate architectural options, risks, and recommendations to technical and business stakeholders.

• Partner with vendors and cross-functional teams to resolve complex technical issues and advance security initiatives.

• Bachelor's degree in Computer Science, Information Technology, or a related field preferred; equivalent practical experience may be considered.

• Seven to ten or more years of hands-on experience in network security engineering, including cloud networking and enterprise security platforms.

• Deep expertise in firewall and WAF policy architecture, routing, network segmentation, and cloud networking security controls.

• Experience designing, implementing, and optimizing enterprise network security solutions across on-premises, hybrid, and cloud environments.

• Strong understanding of Zero Trust, defense-in-depth, secure-by-design principles, and identity-integrated access strategies.

• Demonstrated ability to lead complex troubleshooting efforts and coordinate incident response during high-impact events.

• Experience with technologies and practices such as microsegmentation, ZTNA, SASE/SSE, SD-WAN, DDoS protection, API security, load balancing, and network detection and response.

• Knowledge of Azure network architecture at scale, including hub-and-spoke designs, routing, private endpoints, shared services, and resiliency patterns.

• Experience integrating telemetry, logging, SIEM, and NDR tools to strengthen security monitoring and response capabilities.

• Advanced automation and scripting skills, particularly with Python and/or PowerShell, and familiarity with CI/CD and infrastructure-as-code practices.

• Ability to design operationally sustainable solutions supported by clear documentation, runbooks, monitoring, and lifecycle management.

• Strong communication skills, with the ability to explain complex architectures, technical risks, and recommendations to both technical and business audiences.

• Demonstrated leadership through mentoring, technical reviews, and collaboration across teams.

• Strong ownership, sound judgment, and the ability to prioritize effectively under pressure.

• Preferred certifications include CCNP or CCIE in Security or Enterprise, or equivalent experience.

• Cloud networking and security certifications are preferred, particularly Azure; AWS or GCP certifications are also beneficial.

• SASE or SD-WAN certifications, including Zscaler-related credentials, are a plus.