Remote Senior Security Engineer: PKI & Firewall Automation

Hanover Insurance Group, Inc.; Worcester, Northern (MA, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision, life, and dis

401K with a company match

PTO

On-site medical/wellness center (Worc—

Job summary

The Hanover Insurance Group is seeking a Senior Information Security Engineer to design, implement, and operate PKI, certificate lifecycle, and firewall/web proxy services in a secure enterprise environment. Remote flexibility is available from Worcester, MA or fully remote.

You will automate with Python/Bash/PowerShell, mentor junior staff, and collaborate with security, network, and cloud teams to strengthen our security posture and operational resilience.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity, or equivalent experience.
• 7+ years in Information Security, Network Security, or Infra Engineering roles.
• Expertise in PKI, CA, certificate lifecycle, and TLS/SSL.
• Hands-on with enterprise firewall platforms (Palo Alto, Check Point, Cisco Firepower, Fortinet).
• Experience with Web Proxy technologies (Zscaler, ProxySG, Netskope).
• Strong TCP/IP networking, DNS, VPNs, load balancing, and network security architecture.
• Scripting/automation experience: Python, Bash, PowerShell, Ansible, Terraform.
• Experience with security monitoring, logging, and event analysis tools.
• Understanding LDAP/AD/Kerberos/SAML/OAuth and certificate-based authentication.

Responsibilities

• Lead PKI and certificate management design, availability, scalability, and compliance.
• Own certificate lifecycle process across on-premises and cloud environments.
• Lead Firewall services architecture, policy management, and hardening.
• Manage Web Proxy solutions, policy development, URL filtering, TLS inspection.
• Provide advanced network/security troubleshooting for complex issues.
• Partner with engineering teams to design secure network architectures.
• Develop automation to improve operational efficiency and reduce manual tasks.
• Create monitoring, alerting, and remediation workflows for security platforms.
• Maintain Linux-based security platforms: hardening, patching, vulnerability remediation.
• Lead security infrastructure projects end-to-end and mentor juniors.
• Perform risk assessments and configuration reviews to identify improvements.
• Document technical standards for PKI, firewalls, proxies, and Linux.
• Support incident response with deep technical expertise.
• Evaluate emerging security technologies and provide recommendations.

Skills

PKI

Certificate lifecycle management

Firewall administration

Web Proxy

Linux security

Python

Bash

PowerShell

Ansible

Terraform

Automation

TLS/SSL

LDAP/AD/Kerberos/SAML/OAuth

Network troubleshooting

On-call support

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or equivalent experience

Tools

Palo Alto

Check Point

Cisco Firepower

Fortinet

Zscaler

Blue Coat/Symantec ProxySG

Netskope

Ansible

Terraform

Job description

The Hanover Insurance Group is seeking a Senior Information Security Engineer to design, implement, and operate PKI, certificate lifecycle, and firewall/web proxy services in a secure enterprise environment. Remote flexibility is available from Worcester, MA or fully remote.

You will automate with Python/Bash/PowerShell, mentor junior staff, and collaborate with security, network, and cloud teams to strengthen our security posture and operational resilience.