Director Security Infrastructure & Engineering

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

***Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.***

The Director Security Infrastructure & Engineering will lead teams responsible for designing, implementing, managing, and optimizing enterprise security infrastructure across on-premises, cloud, and hybrid environments. This role provides strategic and technical leadership for network security, Palo Alto Networks firewalls, Prisma Access, and cloud security infrastructure across AWS and Microsoft Azure. The Director will partner with technology and business stakeholders to align security infrastructure with organizational objectives, operational resilience, and regulatory requirements while developing high-performing engineering teams.

• Lead the day-to-day management and performance of enterprise security infrastructure and engineering teams.

• Develop and execute departmental strategies, engineering roadmaps, and resource plans aligned with broader Information Security objectives.

• Oversee the design, implementation, management, and optimization of enterprise network security infrastructure across on-premises, cloud, and hybrid environments.

• Direct the architecture, deployment, administration, and lifecycle management of Palo Alto Networks next-generation firewalls, Panorama, and associated security technologies.

• Lead the implementation and management of Palo Alto Networks Prisma Access, including Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), and secure remote connectivity.

• Oversee network security architecture, including firewalls, IDS/IPS, web application firewalls, VPN, routing, switching, and network segmentation.

• Direct security infrastructure engineering across AWS and Microsoft Azure, including cloud firewalls, network security controls, secure connectivity, and hybrid cloud architecture.

• Partner with Network Engineering, Cloud Engineering, and Infrastructure teams to maintain consistent security architecture and controls across enterprise environments.

• Establish and maintain security infrastructure standards, configuration baselines, firewall policy governance, and operational procedures.

• Ensure security infrastructure platforms are implemented, maintained, upgraded, tested, and optimized for availability, performance, and resilience.

• Drive automation, infrastructure-as-code, and engineering improvements to enhance operational efficiency, scalability, and consistency.

• Direct the evaluation, design, and implementation of security infrastructure solutions in accordance with enterprise architecture and change management processes.

• Identify security infrastructure risks and direct the development of engineering solutions and mitigating controls.

• Develop and monitor operational metrics related to infrastructure availability, performance, service delivery, and engineering effectiveness.

• Provide technical leadership and subject matter expertise for enterprise security initiatives, infrastructure modernization, and cloud transformation projects.

• Partner with business and technology stakeholders to resolve complex security infrastructure issues and communicate technical risks and recommendations.

• Support regulatory inspections, internal and external audits, and compliance requirements involving assigned security infrastructure functions.

• Oversee project execution, vendor relationships, departmental budgets, resource allocation, and staffing requirements.

• Hire, develop, coach, and mentor managers and professional staff while promoting technical excellence, knowledge sharing, and professional development.

• Build productive relationships across Information Technology, Enterprise Architecture, Risk, Audit, Compliance, and business functions.

• Perform other duties and responsibilities as assigned.

• Significant experience in enterprise security infrastructure, network security engineering, cloud security, or related information security disciplines.

• 6 to 8 years of related management experience, consistent with the career-level expectations for this role.

• Demonstrated experience leading multiple teams of security engineering professionals and/or subordinate managers.

• Experience working in a complex technical environment.

• Extensive experience with Palo Alto Networks next-generation firewalls, Panorama, and Prisma Access, including enterprise architecture, deployment, administration, and security policy management.

• Strong knowledge of enterprise network infrastructure and security technologies, including TCP/IP, BGP, OSPF, routing, switching, VPN, network segmentation, IDS/IPS, and web application firewalls.

• Demonstrated experience designing and managing security infrastructure in AWS and Microsoft Azure, including cloud networking, firewalls, network security controls, and hybrid cloud connectivity.

• Strong understanding of AWS security technologies, including VPC, Security Groups, Network ACLs, AWS Network Firewall, Transit Gateway, and related services.

• Strong understanding of Azure security technologies, including Azure Virtual Network, Azure Firewall, Network Security Groups, Azure Virtual WAN, and related services.

• Experience with Zero Trust architecture, SASE, cloud security principles, and secure enterprise network design.

• Experience managing third-party technology providers, infrastructure modernization initiatives, and complex security engineering projects.

• Demonstrated knowledge of security architecture standards, infrastructure hardening, configuration management, change control, and regulatory requirements.

• Strong analytical, problem-solving, organizational, and prioritization skills, with the ability to manage complex technical initiatives and competing business requirements.

• Demonstrated ability to manage professional staff, subordinate managers, indirect resources, and vendors.

• Strong written and verbal communication skills with the ability to translate complex technical issues into business language and influence stakeholders across multiple levels of the organization.

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, Network Engineering, or a related discipline, or equivalent applicable experience.

• Security and technical certifications such as CISSP, CISM, Palo Alto Networks PCNSE or equivalent, AWS Certified Security Specialty, Microsoft Azure certifications, CCNP, or comparable industry certifications.

• Experience in financial services or another highly regulated industry.

• Familiarity with infrastructure automation and configuration management technologies such as Terraform, Ansible, Python, or PowerShell.

This job operates in a professional office environment.

This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job. The employer has the right to revise this job description at any time. You will be evaluated in part based on your performance of the responsibilities and/or tasks listed in this job description. You may be required to perform other duties that are not included on this job description. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason, as per terms and conditions of your employment contract.