Network Security Engineer

Old Republic; Chicago (IL); On-site; USD 100,000 - 130,000; Full time

Job summary

Old Republic is seeking a Network Security Engineer to join its Information Technology team in Chicago. This full-time role involves operationalizing security architectures across on-premises and cloud environments. The ideal candidate will have 3-5 years of network security engineering experience, focusing on routing, cloud networking, and Zero Trust design.

Responsibilities include implementing network security solutions, supporting architectural initiatives, and collaborating effectively with subsidiary teams. This position embraces a hybrid schedule and offers the chance to work with leading technologies.

Qualifications

• 3-5 years of hands-on network and/or network security engineering experience.
• Strong experience with routing, switching, cloud networking, and enterprise protocols.
• Hands-on experience with Zero Trust and hybrid/multi-cloud designs.
• Familiarity with AI-enhanced security technologies and capabilities in AWS, Azure, or GCP.

Responsibilities

• Implement and validate network security solutions aligned with CoE standards.
• Build and maintain proofs-of-concept and reference implementations.
• Partner with Security Architects to advance enterprise initiatives.
• Assist in evaluating and piloting network security technologies.
• Document standards and practices for consistent adoption across subsidiaries.

Skills

Network security engineering

Routing and switching

Cloud networking

Enterprise protocols (BGP, OSPF, etc.)

DNS and DHCP

Zero Trust implementation

AI-enhanced security technologies

Tools

Palo Alto Networks

Zscaler

Cisco

VMware NSX

Job description

Reports To: Network Security Architect - COE

Department: Information Technology

Location/Schedule: Chicago, IL/Hybrid, Minnetonka, MN, and Tampa, FL preferred

Classification: Full-Time /Exempt

Who We Are:

Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview:

As the Center of Excellence continues to grow, we are seeking a Network Security Engineer to operationalize the CoE's architectural direction, turning reference architectures, design patterns, and standards into working, validated, and supportable implementations across the enterprise.

This role executes proofs of concept, builds reference implementations, supports design reviews, and partners directly with subsidiary engineering teams, BISOs, and infrastructure teams to deliver secure, consistent, and modern network security solutions across on-premises, cloud, hybrid, and intercompany environments.

Essential Job Functions:

• Implement, configure, and validate network security solutions aligned with CoE architectural standards, reference designs, and design patterns.
• Build and maintain proofs-of-concept, reference implementations, and lab environments to support architectural decisions and technology evaluations.
• Partner with the Security Architects and other technology staff to advance enterprise initiatives in segmentation, Zero Trust, SASE/SSE, and secure connectivity across on-prem, cloud, and subsidiary environments.
• Support architectural design reviews by providing engineering perspective, feasibility analysis, and implementation guidance.
• Assist in evaluating and piloting network security technologies (next-gen firewalls, SASE/SSE, NDR, DDI, WAF/CDN, micro‑segmentation, etc.) and document findings for the CoE.
• Implement and tune AI‑driven security capabilities (e.g., ML‑based NDR/IDS/IPS, behavioral analytics, anomaly detection) within network security platforms.
• Help identify and mitigate risks associated with AI/ML usage, including data exposure, model security, and LLM‑driven workflows from a network engineering perspective.
• Configure controls in alignment with threat intelligence, regulatory requirements, and enterprise risk profiles.
• Partner with subsidiary engineers, BISOs, and infrastructure teams to deploy and operate CoE‑aligned solutions in a federated environment.
• Document standards, build guides, runbooks, and as‑built designs to enable consistent adoption across subsidiaries as the CoE expands.
• Communicate effectively with technical stakeholders, presenting engineering findings, PoC results, and implementation recommendations.

Qualifications:

• 3‑5 years of hands‑on network and/or network security engineering experience.
• Strong hands‑on experience with routing, switching, cloud networking, and enterprise protocols (BGP, OSPF, VXLAN, IPsec, TLS, etc.).
• Strong hands‑on experience with enterprise DNS, DHCP, and IPAM (DDI), including secure DNS design, DNS security controls (DNSSEC, DoH/DoT, protective DNS), and troubleshooting complex DNS resolution issues across on‑prem, cloud, and remote‑access (e.g., ZPA/ZIA) environments.
• Hands‑on implementation experience with Zero Trust, hybrid/multi‑cloud, and inter‑company connectivity designs.
• Experience working within federated and/or multi‑entity organizations (holding companies, subsidiaries, or M&A environments).
• Working familiarity with NIST CSF, ISO/IEC 27002, and CIS Controls.
• Familiarity with AI‑enhanced security technologies (e.g., ML‑based NDR/EDR, AI‑driven traffic analysis, automated threat modeling tools).
• Experience with AI‑powered capabilities in AWS, Azure, and/or GCP from a network security perspective.
• Hands‑on engineering experience with leading network and security platforms such as Palo Alto Networks, Zscaler (ZIA/ZPA/ZDX), Infoblox, Cisco, F5, Cloudflare/Akamai, VMware NSX, or comparable technologies.

ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.