Remote Security Architect: Firewall & Standards Lead

Schurz Broadband Group, Inc.; Hagerstown (MD); Remote; USD 108,000 - 138,000; Full time

Benefits offered by this job

Group health & dental insurance

401(k) with company match

Generous PTO

Wellness program

Job summary

Schurz Broadband Group, Inc. is seeking a Security Engineer III to own and advance the firewall estate, security architecture, and standards across six properties. You will author baselines, manage the standards library, and drive critical migrations with hands-on execution.

The role reports to the VP, Business Technology and is fully remote within driving distance of Schurz properties. Expect rigorous risk management, documentation discipline, and collaboration with risk committees.

Qualifications

• Eight+ years in network and security engineering, with at least three in a senior or lead capacity setting standards rather than following them, while remaining hands-on.
• Proven multi-site security architecture experience where the candidate both designed and implemented the result.
• Expert-level firewall platform command, including centralized management at scale and migration leadership.
• Service-provider security depth: BGP security controls, DDoS mitigation strategy, subscriber-network separation, and an understanding of how carrier plant differs from enterprise infrastructure.
• Demonstrated ownership of a vulnerability and hardening program, including reporting to executives or a risk committee.
• A body of written standards and documentation they can point to and discuss. This is a screening requirement, not a preference.
• Self-directed at the roadmap level: able to enter an environment with no backlog and produce a defensible 12-month plan.
• Able to write and present a recommendation a non-technical executive can act on.

Responsibilities

• Own the firewall estate for all six properties: the standard, the platform strategy, the refresh roadmap, and the vendor relationship.
• Define the firewall reference architecture — platform selection, high-availability model, management topology, zone model, and the policy standard every property implements.
• Decide whether the estate consolidates onto one vendor and drive that conversion, or document why a mixed estate is the right answer and how it will be managed consistently.
• Own the multi-year refresh and capacity plan as a budget line, and defend it.
• Personally execute the high-risk conversions, migrations, and cutovers rather than delegating them.
• Hold final approval on every firewall change that deviates from standard and on every exception that stays open.
• Define the access-control and segmentation reference architecture for all six properties, replacing six locally grown conventions with one standard plus a documented deviation list.
• Author the hardening baselines platform by platform, and the method for measuring drift against them.

Skills

Firewall expertise

Security architecture

Documentation

Risk/compliance knowledge

Vendor management

Incident response

Tools

Policy-as-code

Threat modelling

Job description

Schurz Broadband Group, Inc. is seeking a Security Engineer III to own and advance the firewall estate, security architecture, and standards across six properties. You will author baselines, manage the standards library, and drive critical migrations with hands-on execution.

The role reports to the VP, Business Technology and is fully remote within driving distance of Schurz properties. Expect rigorous risk management, documentation discipline, and collaboration with risk committees.