Network Security Engineer

Old Republic; Chicago (IL); In loco; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Old Republic is seeking a Network Security Engineer to operationalize the Center of Excellence's architectural direction across on-premises, cloud, hybrid, and inter-company environments. You will implement, validate, and support secure network solutions following reference designs and patterns.

You will build PoCs, assist in design reviews, and collaborate with architects and infrastructure teams to deliver AI-enabled, ZT-driven security with strong regulatory alignment.

Competenze

• 3-5 years of hands-on network and/or network security engineering experience.
• Strong hands-on experience with routing, switching, cloud networking, and enterprise protocols (BGP, OSPF, VXLAN, IPsec, TLS).
• Strong hands-on experience with DNS, DHCP, and IPAM (DDI) with DNSSEC/DoH/DoT and secure resolution.
• Hands-on implementation of Zero Trust, hybrid/multi-cloud, and inter-company connectivity designs.
• Experience in federated/multi-entity organizations (holding companies, subsidiaries, or M&A).
• Familiarity with NIST CSF, ISO/IEC 27002, CIS Controls; knowledge of AI-enhanced security tech.

Mansioni

• Implement, configure, and validate network security solutions aligned with CoE standards.
• Build PoCs, reference implementations, and lab environments for evaluations.
• Partner with Security Architects to advance segmentation, Zero Trust, and secure connectivity.
• Support design reviews by providing engineering feasibility and guidance.
• Evaluate and pilot next-gen security technologies and document findings.
• Implement and tune AI-driven security capabilities within platforms.
• Identify and mitigate risks related to AI/ML usage, data exposure, and model security.
• Configure controls aligning with threat intel, regulations, and risk profiles.
• Collaborate with subsidiary engineers to deploy CoE-aligned solutions in federated environments.
• Document standards, runbooks, and as-built designs for scalable adoption.
• Communicate findings and recommendations to technical stakeholders.

Conoscenze

Network security engineering

Routing

Switching

Cloud networking

BGP

OSPF

VXLAN

IPsec

TLS

DNS/DHCP/IPAM

Zero Trust

SASE/SSE

NDR

WAF/CDN

AI/ML security

Zscaler (ZIA/ZPA/ZDX)

Palo Alto Networks

Cisco

Infoblox

VMware NSX

Strumenti

Palo Alto Networks

Zscaler (ZIA/ZPA/ZDX)

Infoblox

Cisco

F5

Cloudflare/Akamai

VMware NSX

ZDX

AWS

Azure

GCP

Descrizione del lavoro

Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview:

As the Center of Excellence continues to grow, we are seeking a Network Security Engineer to operationalize the CoE's architectural direction, turning reference architectures, design patterns, and standards into working, validated, and supportable implementations across the enterprise.
This role executes proof-of-concepts, builds reference implementations, supports design reviews, and partners directly with subsidiary engineering teams, BISOs, and infrastructure teams to deliver secure, consistent, and modern network security solutions across on-premises, cloud, hybrid, and inter-company environments.

Essential Job Functions:

• Implement, configure, and validate network security solutions aligned with CoE architectural standards, reference designs, and design patterns.
• Build and maintain proof-of-concepts (PoCs), reference implementations, and lab environments to support architectural decisions and technology evaluations.
• Partner with the Security Architects and other technology staff to advance enterprise initiatives in segmentation, Zero Trust, SASE/SSE, and secure connectivity across on-prem, cloud, and subsidiary environments.
• Support architectural design reviews by providing engineering perspective, feasibility analysis, and implementation guidance.
• Assist in evaluating and piloting network security technologies (next-gen firewalls, SASE/SSE, NDR, DDI, WAF/CDN, micro‑segmentation, etc.) and document findings for the CoE.
• Implement and tune AI‑driven security capabilities (e.g., ML‑based NDR/IDS/IPS, behavioral analytics, anomaly detection) within network security platforms.
• Help identify and mitigate risks associated with AI/ML usage, including data exposure, model security, and LLM‑driven workflows from a network engineering perspective.
• Configure controls in alignment with threat intelligence, regulatory requirements, and enterprise risk profiles.
• Partner with subsidiary engineers, BISOs, and infrastructure teams to deploy and operate CoE‑aligned solutions in a federated environment.
• Document standards, build guides, runbooks, and as‑built designs to enable consistent adoption across subsidiaries as the CoE expands.
• Communicate effectively with technical stakeholders, presenting engineering findings, PoC results, and implementation recommendations.
• Perform other duties as assigned.

Qualifications:

• 3-5 years of hands‑on network and/or network security engineering experience.
• Strong hands‑on experience with routing, switching, cloud networking, and enterprise protocols (BGP, OSPF, VXLAN, IPsec, TLS, etc.).
• Strong hands‑on experience with enterprise DNS, DHCP, and IPAM (DDI) - including secure DNS design, DNS security controls (DNSSEC, DoH/DoT, protective DNS), and troubleshooting complex DNS resolution issues across on‑prem, cloud, and remote‑access (e.g., ZPA/ZIA) environments.
• Hands‑on implementation experience with Zero Trust, hybrid/multi‑cloud, and inter‑company connectivity designs.
• Experience working within federated and/or multi‑entity organizations (holding companies, subsidiaries, or M&A environments).
• Working familiarity with NIST CSF, ISO/IEC 27002, and CIS Controls.
• Familiarity with AI‑enhanced security technologies (e.g., ML‑based NDR/EDR, AI‑driven traffic analysis, automated threat modeling tools).
• Experience with AI‑powered capabilities in AWS, Azure, and/or GCP from a network security perspective.
• Hands‑on engineering experience with leading network and security platforms such as Palo Alto Networks, Zscaler (ZIA/ZPA/ZDX), Infoblox, Cisco, F5, Cloudflare/Akamai, VMware NSX, or comparable equivalent technologies.
• Strong written and verbal communication and documentation skills.

Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview:

As the Center of Excellence continues to grow, we are seeking a Network Security Engineer to operationalize the CoE's architectural direction, turning reference architectures, design patterns, and standards into working, validated, and supportable implementations across the enterprise.
This role executes proof‑of‑concepts, builds reference implementations, supports design reviews, and partners directly with subsidiary engineering teams, BISOs, and infrastructure teams to deliver secure, consistent, and modern network security solutions across on‑premises, cloud, hybrid, and inter‑company environments.

Essential Job Functions:

• Implement, configure, and validate network security solutions aligned with CoE architectural standards, reference designs, and design patterns.
• Build and maintain proof‑of‑concepts (PoCs), reference implementations, and lab environments to support architectural decisions and technology evaluations.
• Partner with the Security Architects and other technology staff to advance enterprise initiatives in segmentation, Zero Trust, SASE/SSE, and secure connectivity across on‑prem, cloud, and subsidiary environments.
• Support architectural design reviews by providing engineering perspective, feasibility analysis, and implementation guidance.
• Assist in evaluating and piloting network security technologies (next‑gen firewalls, SASE/SSE, NDR, DDI, WAF/CDN, micro‑segmentation, etc.) and document findings for the CoE.
• Implement and tune AI‑driven security capabilities (e.g., ML‑based NDR/IDS/IPS, behavioral analytics, anomaly detection) within network security platforms.
• Help identify and mitigate risks associated with AI/ML usage, including data exposure, model security, and LLM‑driven workflows from a network engineering perspective.
• Configure controls in alignment with threat intelligence, regulatory requirements, and enterprise risk profiles.
• Partner with subsidiary engineers, BISOs, and infrastructure teams to deploy and operate CoE‑aligned solutions in a federated environment.
• Document standards, build guides, runbooks, and as‑built designs to enable consistent adoption across subsidiaries as the CoE expands.
• Communicate effectively with technical stakeholders, presenting engineering findings, PoC results, and implementation recommendations.
• Perform other duties as assigned.

Qualifications:

• 3-5 years of hands‑on network and/or network security engineering experience.
• Strong hands‑on experience with routing, switching, cloud networking, and enterprise protocols (BGP, OSPF, VXLAN, IPsec, TLS, etc.).
• Strong hands‑on experience with enterprise DNS, DHCP, and IPAM (DDI) - including secure DNS design, DNS security controls (DNSSEC, DoH/DoT, protective DNS), and troubleshooting complex DNS resolution issues across on‑prem, cloud, and remote‑access (e.g., ZPA/ZIA) environments.
• Hands‑on implementation experience with Zero Trust, hybrid/multi‑cloud, and inter‑company connectivity designs.
• Experience working within federated and/or multi‑entity organizations (holding companies, subsidiaries, or M&A environments).
• Working familiarity with NIST CSF, ISO/IEC 27002, and CIS Controls.
• Familiarity with AI‑enhanced security technologies (e.g., ML‑based NDR/EDR, AI‑driven traffic analysis, automated threat modeling tools).
• Experience with AI‑powered capabilities in AWS, Azure, and/or GCP from a network security perspective.
• Hands‑on engineering experience with leading network and security platforms such as Palo Alto Networks, Zscaler (ZIA/ZPA/ZDX), Infoblox, Cisco, F5, Cloudflare/Akamai, VMware NSX, or comparable equivalent technologies.
• Strong written and verbal communication and documentation skills.

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.