Network Security Engineer

NorthMark Compute & Cloud; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Lunch stipend

Employer-paid medical

Dental & Vision

Parental leave

401(k) match

Flexible benefits

Paid time off

Job summary

NorthMark Compute & Cloud is seeking a Senior Network Security Engineer to lead and implement a hyperscale security infrastructure. You will mentor engineers, oversee complex security initiatives, and drive automation across the stack using Python, Terraform, and vendor APIs.

The role emphasizes secure design, incident leadership, and collaboration with infrastructure, DevOps, and application teams to embed security throughout the tech stack in a fast-paced, innovative environment.

Qualifications

• Extensive experience in network engineering and security engineering.
• Proven leadership in a senior or lead engineering role.
• Strong OSI model knowledge and hands-on TCP/UDP experience.
• Deep understanding of network security technologies (firewalls, VPNs, proxies, TLS, DNS).
• Experience with Zero Trust, segmentation and secure cloud networking (AWS/Azure).
• Automation / scripting background (Python, Terraform, Ansible).
• Relevant certifications preferred (CISSP, CCIE Security, GIAC, vendor certs).

Responsibilities

• Mentor junior and mid-level engineers and guide architecture decisions.
• Implement and manage advanced security solutions (firewalls, proxies, system hardening).
• Lead escalation for critical security incidents and root cause analysis.
• Develop automation playbooks and security policy frameworks.
• Oversee vulnerability assessments, pen testing coordination, remediation planning.
• Champion automation of infrastructure build, day-two security operations, and lifecycle management using Python, Terraform, and vendor APIs.
• Collaborate with infra, DevOps, and app teams to embed security best practices.

Skills

Network security

Leadership

TCP/IP

Zero Trust

Python scripting

Automation tooling

Security architectures

Cloud networking

Tools

Palo Alto

Fortinet

Check Point

F5

Job description

The Company

NorthMark Compute & Cloud (NMC²) is backed by dedicated leadership and investment, with a clear mission as it operates at the bleeding edge of technology. Its goal is to scale and enhance the high-performance computing (HPC) and cloud infrastructure that supports its clients' research, production, and delivery, enabling breakthroughs that shape the industries of tomorrow. Its engineers build critical infrastructure to eliminate friction in scientific research, simulations, analysis, and decision-making, accelerating discovery and driving faster innovation.

The Company

NorthMark Compute & Cloud (NMC²) is backed by dedicated leadership and investment, with a clear mission as it operates at the bleeding edge of technology. Its goal is to scale and enhance the high-performance computing (HPC) and cloud infrastructure that supports its clients' research, production, and delivery, enabling breakthroughs that shape the industries of tomorrow. Its engineers build critical infrastructure to eliminate friction in scientific research, simulations, analysis, and decision-making, accelerating discovery and driving faster innovation.

The Position

As a Senior Network Security Engineer, you will play a critical role in managing, implementing and optimising a hyperscale network security infrastructure. As a technical leader, you will oversee complex security architecture initiatives, mentor peer engineers, handle escalated incident response efforts and ensure compliance with the latest security standards. Our company roadmap is centred on automation, therefore a background in automation and interest in leveraging automation is key to this role.

Responsibilities

• Mentoring junior and mid-level engineers, overseeing team activities and providing guidance in complex troubleshooting and architecture decisions
• Implementing and managing advanced security solutions using firewalls, proxy, system hardening, treat profile and segmentation strategies to secure the intellectual data
• Acting as a lead escalation for critical security incidents
• Developing automation playbooks, network security policies framework and consolidation, treat model and drive root cause analysis with corrective actions
• Overseeing network vulnerability assessments, penetration testing coordination and remediation planning
• Championing the integration of automated tools for infrastructure build, day two support and lifecycle management of all security infrastructure using platforms like Python, Terraform, and vendor APIs, leveraging tools such as Algosec, Tufin, Jenkins and Git
• Working closely with infrastructure, DevOps and application teams to embed security best practices throughout the technology stack

Requirements

• Extensive experience in network engineering and security engineering, along with proven architectural experience in trusted, untrusted and DMZ environments
• Proven leadership experience in a senior or lead engineering role, with the ability to drive the team and work individually
• Strong understanding of network protocols and the OSI model, with hands-on experience in TCP/UDP-based applications, routing, switching and load balancing
• Extensive knowledge of network security technologies, including firewalls, VPNs, proxies, MACsec, IPsec, HTTPS, certificate chains, DNS, NTP, AAA, and domain-based authentication and authorisation
• Expertise with multiple security vendors, such as, Palo Alto, Fortinet, Check Point and F5
• Strong understanding of Zero Trust principles, segmentation, and secure cloud networking in AWS or Azure
• Familiarity with scripting and automation using Python, Ansible, or Terraform for example
• Certifications such as CISSP, CCIE Security, GIAC (GSEC/GCIH/GXPN), Palo Alto, Fortinet or equivalent highly preferred

The Following Skills And Experience Would Be Beneficial

• Core network with VxLAN EVPN DC architecture experience
• Experience with hybrid or multi-cloud environments
• Prior involvement in M&A technical integrations
• Background in building SOC capabilities or working with MSSPs
• Excellent written and verbal communication skills
• Firewall automation experience is beneficial

It is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.

Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Benefits & Perks

• Company-Paid Lunch Stipend: Lunch is provided via GrubHub
• Company-Paid Benefits: 100% Employer-Paid Medical in our High Deductible Health Plan, Dental and Vision benefits for employees and their families, 16 weeks of Paid Parental Leave, Employee Assistance Program, Life insurance, Short-Term Disability and Long-Term Disability
• 401(k): Company will match 100% of your contributions up to 6%
• Optional Employee-Paid Benefits: Medical insurance in our PPO plan and a variety of other benefits such as Health Savings Accounts (with Company Contribution!), Flexible Spending Accounts, Supplemental Life Insurance, Wellhub and more.
• Time Off: 25 days of Paid Time Off plus 12 company holidays

EQUAL OPPORTUNITY EMPLOYER

NORTHMARK STRATEGIES LLC IS AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER. THE COMPANY'S POLICY IS NOT TO DISCRIMINATE AGAINST ANY APPLICANT OR EMPLOYEE BASED ON RACE, COLOR, RELIGION, NATIONAL ORIGIN, GENDER, AGE, SEXUAL ORIENTATION, GENDER IDENTITY OR EXPRESSION, MARITAL STATUS, MENTAL OR PHYSICAL DISABILITY, AND GENETIC INFORMATION, OR ANY OTHER BASIS PROTECTED BY APPLICABLE LAW. THE FIRM ALSO PROHIBITS HARASSMENT OF APPLICANTS OR EMPLOYEES BASED ON ANY OF THESE PROTECTED CATEGORIES.