IT Security Senior Engineer

Jobgether; USA; Remote; USD 150.000 - 200.000; Vollzeit

Benefits dieser Stelle

Competitive compensation

Flexible remote work option

Comprehensive benefits package

Career development opportunities

Collaborative, values-driven culture

Zusammenfassung

Jobgether is seeking an IT Security Senior Engineer in the United States. This remote role demands senior-level expertise to lead secure network designs across cloud and on‑premises environments, advance Zero Trust strategies, and guide architecture decisions.

You will mentor teams, drive automation, and shape security standards with cross-functional partners. The ideal candidate has 7+ years in network security, strong firewall/WAF expertise, Azure networking experience, and a track record of

Qualifikationen

• Bachelor's degree in Computer Science, Information Technology, or a related field preferred; equivalent practical experience may be considered.
• Seven to ten or more years of hands‑on experience in network security engineering, including cloud networking and enterprise security platforms.
• Deep expertise in firewall and WAF policy architecture, routing, network segmentation, and cloud networking security controls.
• Experience designing, implementing, and optimizing enterprise network security solutions across on-premises, hybrid, and cloud environments.
• Strong understanding of Zero Trust, defense-in-depth, secure‑by‑design principles, and identity-integrated access strategies.
• Demonstrated ability to lead complex troubleshooting efforts and coordinate incident response during high‑impact events.
• Experience with microsegmentation, ZTNA, SASE/SSE, SD‑WAN, DDoS protection, API security, load balancing, and NDR tools.
• Knowledge of Azure network architecture at scale, hub‑and‑spoke designs, routing, private endpoints, shared services, and resiliency patterns.
• Experience integrating telemetry, logging, SIEM, and NDR tools to strengthen security monitoring and response capabilities.
• Advanced automation and scripting with Python and/or PowerShell, and familiarity with CI/CD and IaC practices.
• Ability to design operationally sustainable solutions with documentation, runbooks, monitoring, and lifecycle management.
• Strong communication skills for technical and business audiences.
• Demonstrated leadership through mentoring, technical reviews, and cross-team collaboration.
• Strong ownership, sound judgment, and prioritization under pressure.
• Preferred: CCNP/CCIE in Security or Enterprise; Azure-focused cloud certifications; AWS/GCP beneficial.
• SASE or SD‑WAN certifications, including Zscaler-related credentials, are a plus.

Aufgaben

• Architecture, Design, and Roadmap Leadership: Lead secure architectures for LAN/WAN, hybrid cloud, and SaaS, establish standards.
• Own medium-to-large security initiatives from design through implementation, including network segmentation and firewall modernization.
• Contribute to long-term security roadmaps by identifying gaps and aligning with Zero Trust objectives.
• Advanced Network Security Engineering: Engineer firewall and WAF capabilities, DDoS protection, API security, and load-balancing controls.
• Design and implement Azure networking/security architectures at scale with hub-and-spoke, private connectivity, and resiliency patterns.
• Implement microsegmentation integrating identity signals into access policies.
• Lead integrations with telemetry, SIEM, and NDR tools to improve visibility and threat detection.
• Operational Excellence and Incident Leadership: Serve as Level 3 escalation point for high-severity incidents; coordinate response and remediation.
• Establish runbooks, monitoring, and reliability metrics for managed platforms; strengthen on-call readiness.
• DevSecOps and Automation: Define automation standards for network/security workflows; integrate secure connectivity into CI/CD and IaC.
• Mentorship and Cross-Functional Leadership: Mentor engineers, conduct technical reviews, communicate options/risks to stakeholders, partner with vendors.

Kenntnisse

Zero Trust

Cloud networking

Network segmentation

SASE/SSE

ZTNA

DDoS protection

API security

Automation

Python/PowerShell

Incident response

Ausbildung

Bachelor's degree in CS/IT or related field

Tools

Azure networking

SIEM

NDR

Jobbeschreibung

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Security Senior Engineer based in the United States.The IT Security Senior Engineer will provide advanced engineering expertise and technical leadership to strengthen enterprise network security across cloud and on-premises environments. This role is central to designing secure, scalable, and resilient infrastructure while advancing Zero Trust security strategies. The successful candidate will lead complex security initiatives, modernize network protection capabilities, and improve visibility, detection, and incident response. Working closely with platform engineering, IT, and business stakeholders, the engineer will drive automation, secure-by-design practices, and operational excellence. The position also involves mentoring engineering teams, shaping technical standards, and guiding architecture decisions across the organization. This is a remote opportunity suited to a highly experienced security professional who combines deep technical knowledge with strategic thinking and collaborative leadership.

Accountabilities

• Architecture, Design, and Roadmap Leadership
  • Lead the design of secure architectures for LAN/WAN, hybrid cloud, and SaaS environments, establishing reusable reference patterns and standards.
  • Own medium-to-large security initiatives, including network segmentation, SASE expansion, and firewall modernization, from design through implementation.
  • Contribute to long-term security roadmaps by identifying gaps, reducing technical debt, and aligning infrastructure with Zero Trust objectives.
• Advanced Network Security Engineering
  • Engineer and optimize enterprise firewall and web application firewall (WAF) capabilities, DDoS protection, API security patterns, and load-balancing controls.
  • Design and implement Azure networking and security architectures at scale, including hub-and-spoke connectivity, shared services, private connectivity, routing strategies, and resiliency patterns.
  • Implement and operationalize microsegmentation strategies, integrating identity and endpoint signals into access and enforcement policies.
  • Lead integrations with telemetry, logging, security information and event management (SIEM), and network detection and response (NDR) tools to improve visibility and threat detection.
• Operational Excellence and Incident Leadership
  • Serve as a Level 3 escalation point for high-severity security incidents, coordinating technical response and ensuring timely mitigation.
  • Lead root-cause analyses, produce post-incident reports, and drive long-term remediation and resilience improvements.
  • Establish and improve operational runbooks, reliability practices, monitoring, and performance metrics for managed platforms.
  • Strengthen on-call readiness and promote consistent operational standards across security engineering teams.
• DevSecOps and Automation
  • Define automation standards for network and security workflows, developing reusable modules and safeguards to support safe, consistent changes.
  • Collaborate with platform engineering to integrate secure connectivity controls into CI/CD pipelines and infrastructure-as-code workflows.
  • Apply scripting and automation to improve efficiency, repeatability, and security governance.
• Mentorship and Cross-Functional Leadership
  • Mentor engineers in secure architecture, troubleshooting, and engineering best practices.
  • Conduct technical reviews and provide guidance on complex security designs and implementation decisions.
  • Communicate architectural options, risks, and recommendations to technical and business stakeholders.
  • Partner with vendors and cross-functional teams to resolve complex technical issues and advance security initiatives.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field preferred; equivalent practical experience may be considered.
• Seven to ten or more years of hands‑on experience in network security engineering, including cloud networking and enterprise security platforms.
• Deep expertise in firewall and WAF policy architecture, routing, network segmentation, and cloud networking security controls.
• Experience designing, implementing, and optimizing enterprise network security solutions across on-premises, hybrid, and cloud environments.
• Strong understanding of Zero Trust, defense-in-depth, secure‑by‑design principles, and identity-integrated access strategies.
• Demonstrated ability to lead complex troubleshooting efforts and coordinate incident response during high‑impact events.
• Experience with technologies and practices such as microsegmentation, ZTNA, SASE/SSE, SD‑WAN, DDoS protection, API security, load balancing, and network detection and response.
• Knowledge of Azure network architecture at scale, including hub‑and‑spoke designs, routing, private endpoints, shared services, and resiliency patterns.
• Experience integrating telemetry, logging, SIEM, and NDR tools to strengthen security monitoring and response capabilities.
• Advanced automation and scripting skills, particularly with Python and/or PowerShell, and familiarity with CI/CD and infrastructure-as-code practices.
• Ability to design operationally sustainable solutions supported by clear documentation, runbooks, monitoring, and lifecycle management.
• Strong communication skills, with the ability to explain complex architectures, technical risks, and recommendations to both technical and business audiences.
• Demonstrated leadership through mentoring, technical reviews, and collaboration across teams.
• Strong ownership, sound judgment, and the ability to prioritize effectively under pressure.
• Preferred certifications include CCNP or CCIE in Security or Enterprise, or equivalent experience.
• Cloud networking and security certifications are preferred, particularly Azure; AWS or GCP certifications are also beneficial.
• SASE or SD‑WAN certifications, including Zscaler-related credentials, are a plus.

Benefits

• Competitive compensation.
• Flexible workplace and remote work opportunity.
• Comprehensive benefits package.
• Opportunities for professional growth and career development.
• A collaborative, values-driven work environment focused on employee well‑being and shared success.