Note: The job is a remote job and is open to candidates in USA. Switch designs, builds, and operates advanced data centers that enable the technology of the future. The Senior Network Security Engineer designs and implements complex network security solutions, leads technical initiatives, evaluates technologies, establishes engineering standards, and improves the security and scalability of network environments. The role also provides advanced escalation support, mentors engineers, expands automation, and participates in the network security on-call rotation.
Responsibilities
- Lead complex network security engineering projects from technical evaluation and architecture through implementation
- Design and implement network security solutions aligned with Switch security and infrastructure requirements
- Assess existing network architectures and recommend improvements to security, performance, scalability, reliability, and operational efficiency
- Design enterprise network segmentation strategies, including macro- and micro-segmentation
- Design and deploy Palo Alto Networks Next-Generation Firewall architectures
- Establish standards and best practices for network security device deployment, configuration, maintenance, and lifecycle management
- Evaluate emerging technologies, products, and industry practices and recommend solutions based on technical fit, risk, scalability, and cost
- Lead proofs of concept and technical evaluations for new network security capabilities
- Conduct network security assessments, prioritize identified risks, and lead remediation efforts
- Implement and maintain intrusion prevention and advanced threat prevention technologies
- Develop and expand network automation using Infrastructure-as-Code, APIs, programming, and other automation frameworks
- Establish standards for network architecture, engineering, configuration, and project documentation
- Develop and maintain network security policies, standards, and procedures
- Collaborate across Network Engineering, Security, Infrastructure, Operations, and other teams on complex technical initiatives
- Serve as a senior escalation point and technical resource for Network Engineer I, II, and III team members
- Mentor engineers through technical guidance, design reviews, troubleshooting, and knowledge sharing
- Develop technical documentation and training materials that strengthen engineering capabilities across the team
- Maintain software and security updates across network security devices and platforms
- Provide advanced troubleshooting and incident escalation support
- Participate in the network security on-call rotation
Skills
- 8+ years of network engineering experience, or 4+ years of relevant experience with a CCIE-level certification
- 6+ years of experience implementing advanced network security projects and solutions
- 2+ years of experience implementing network automation
- Deep understanding of network segmentation architectures and technologies
- Advanced experience designing, deploying, and managing Palo Alto Networks Next-Generation Firewall environments
- Advanced experience designing, deploying, and maintaining OSPF and BGP
- Experience leading complex network security engineering initiatives and proofs of concept
- Experience with Infrastructure-as-Code methods for network automation, configuration management, and provisioning
- Experience using Terraform
- Experience designing, deploying, and managing public cloud networks
- Experience designing and managing enterprise routing and switching technologies
- Experience developing and maintaining network architecture designs and technical documentation
- Experience with intrusion prevention and advanced threat prevention technologies
- Experience with application tunneling and reverse proxy technologies
- Working knowledge of encryption protocols and security controllers
- Experience with Python or another programming language used for network engineering and automation
- Experience with source control systems and CI/CD pipelines
- Experience working with APIs and system integrations
- Working knowledge of Linux
- Experience with Cisco IOS-XE and NX-OS
- Experience with VPN and tunneling technologies and protocols
- Experience analyzing packet captures and network device logs
- Experience securing network data, control, and management planes
- Experience with authentication, authorization, and accounting protocols and applications
- Experience with VMware NSX Gateway and Distributed Firewall technologies
- Experience with Cisco ISE and 802.1X
- Experience with Cisco Cyber Vision
- Experience with Cloudflare proxy technologies
- Experience with enterprise load balancing technologies
- CCNP certification
- Cisco DevNet certification
Benefits
- Flexibility & Remote Opportunities – Whether in-office, hybrid, or fully remote, we offer the technology and support to keep teams connected and productive.
- Career Stability & Growth – We invest in our people, providing opportunities & advancement in a stable, growing company.
- Generous Benefits Package - Switch provides comprehensive coverage for you and your family that can be tailored to fit your personal needs, and more!
Company Overview
Company H1B Sponsorship