Network Engineer III

Simpson Thacher & Bartlett LLP; United States; On-site; USD 175,000 - 210,000; Full time

Job summary

Simpson Thacher & Bartlett LLP seeks a Senior Network Engineer to fortify the firm’s network and security across on‑premises and cloud environments. You will configure firewalls, VPNs, and security zones, lead migration projects, and ensure regulatory compliance while collaborating with IAM and service delivery teams.

The role demands deep Palo Alto and Prisma expertise, 7+ years of experience, and a proactive approach to threat mitigation and secure operations for a premier legal firm.

Qualifications

• 7+ years of relevant experience.
• Proficient in network protocols, routing and switching concepts, and the ability to troubleshoot complex network security issues.
• Familiarity with firewall management tools and security monitoring technologies.
• Excellent analytical and problem‑solving skills.
• Extreme understanding with Prisma Access VPN solution and Prisma service connections.
• Familiarity with SASE targets; legal IT experience is a plus.

Responsibilities

• Architect & design secure network solutions across on‑premises and cloud environments.
• Lead firewall migration projects and oversee hardware/software upgrades.
• Configure firewall rules, VPNs, and policy-based forwarding; establish security zones.
• Ensure regulatory compliance and risk posture for the network.
• Collaborate with IAM and Service Delivery teams to integrate firewall management.
• Provide guidance and troubleshooting support to junior engineers.

Skills

Network protocols

Routing & switching

Troubleshooting

Security monitoring

Prisma Access

VPN configuration

SASE concepts

Vendor tools

Education

Bachelor's degree in IT, Cybersecurity, CS or related field

Tools

PAN-OS

Panorama

Cisco IOS

Fortinet FortiOS

Palo Alto Prisma Access

Job description

The Senior network Engineer that will play a vital role in fortifying Simpson Thacher’s network and security, ensuring the protection of our infrastructure which aligns with our commitment to operational excellence and innovation. The role is critical for maintaining the safety and integrity of our IT infrastructure, ensuring seamless and secure operations across the company. The Senior Network Engineer will directly have an impact on the Firm's ability to safeguard its digital assets, maintain regulatory compliance, and ensure the continuous delivery of high-quality services to our clients and stakeholders.

Essential Job Duties & Responsibilities

Deep-Expert level proficiency with leading enterprise platforms like Palo Alto networks, PAN OS, Panorama, Cisco and Fortinet as well as the Palo Alto Networks family of Next Gen firewalls, including but not limited to: firewall rule creation Configuring Policy based forwarding rules Create site to site VPNs and SASE targets Experienced with deploying Palo Alto SDWAN-IONs Architect & Design, deploy, and maintain secure network solutions across on premises, and cloud environments. Manage firewall rules and policies to ensure secure and efficient network traffic flow, perform rule base optimization and establish security zones to harden the enterprise Conduct regular system audits to assess security risks and compliance with established protocols, ensuring that our network defenses remain impervious to external threats Identify vulnerabilities within our network and recommend enhancements to our security posture Collaborate closely with other IT teams, including the Identity and Access Management (IAM) and Service Delivery teams, to integrate firewall management with wider security and operational strategies Ensure firewall configurations and policies maintain compliance with regulatory frameworks. Provide technical support and guidance in network security issues to various departments, enhancing the overall security knowledge within the company Stay up to date with emerging security threats and firewall technologies to continuously improve our security framework Lead Firewall migration projects using vendor specific tools and oversee hardware/Software upgrades. When needed provide technical guidance, training and troubleshooting support to junior network engineers and security engineers. Perform other duties as needed.

Education Required

Bachelor's degree in information technology, Cybersecurity, Computer Science, or a related field, or equivalent professional experience in network security.

Skills and Experience Required

7+ years of relevant experience Proficient in network protocols, routing and switching concepts, and the ability to troubleshoot complex network security issues Ability to perform with little to no guidance from management Familiarity with various firewall management tools and security monitoring technologies. Excellent analytical and problem-solving skills, with the ability to make quick, informed decisions Extreme understanding with Palo Alto Networks Prisma Access VPN solution Ability to configure Prisma service connections and Prisma HIP checks Familiarity with SASE targets Preferred Legal IT experience a plus but not required.

Salary Information

NY Only: The estimated base salary range for this position is $175,000 to $210,000 at the time of posting. The actual salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job. This role is exempt meaning it is not overtime pay eligible. Simpson Thacher will not sponsor applicants for work visas for this position.

Privacy Notice

For information about how Simpson Thacher & Bartlett LLP collects and processes your personal information, please refer to our Privacy Notice available at https://www.stblaw.com/other/privacy-notice.

Simpson Thacher & Bartlett is committed to a collegial work environment in which all individuals are treated with respect and dignity. The Firm prohibits discrimination or harassment based upon race, color, religion, gender, gender identity or expression, age, national origin, citizenship status, disability, marital or partnership status, sexual orientation, veteran’s status or any other legally protected status. This Policy pertains to every aspect of an individual’s relationship with the Firm, including but not limited to recruitment, hiring, compensation, benefits, training and development, promotion, transfer, discipline, termination, and all other privileges, terms and conditions of employment.

#LI-Hybrid Simpson Thacher & Bartlett LLP is one of the world’s leading international law firms. The Firm was established in 1884 and has approximately 2,000 lawyers. Headquartered in New York with offices in Beijing, Boston, Brussels, Chicago, Dallas, Hong Kong, Houston, London, Los Angeles, Luxembourg, Palo Alto, San Francisco, São Paulo, Singapore, Tokyo and Washington, D.C., the Firm provides coordinated legal advice and transactional capability to clients around the globe.