Senior Consultant I - Network Security Engineering

Allstate; United States; Remote; USD 75,000 - 126,000; Full time

Job summary

Allstate is seeking a Senior Consultant I in Network Security Engineering to engineer, support, automate, and maintain enterprise network security platforms. The role emphasizes ownership, hands-on problem solving, and driving automation to improve reliability and scalability.

You will work with Palo Alto Networks, IaC, CI/CD pipelines, and scripting to streamline operations, troubleshoot issues, and contribute to engineering best practices within established standards.

Qualifications

• Strong background in network engineering and network security.
• Solid understanding of core networking concepts (TCP/IP, routing, NAT, DNS).
• Experience with enterprise firewall and network security platforms.
• Hands-on scripting/automation for infrastructure engineering.
• Experience with REST APIs or programmatic interfaces to automate platforms.
• Experience building and maintaining CI/CD pipelines for infrastructure deployment.

Responsibilities

• Engineer and maintain enterprise network security platforms (Palo Alto and related tech).
• Design, test, and validate network security solutions across enterprise and cloud environments.
• Troubleshoot complex network, firewall, routing, connectivity, and app communication issues.
• Develop and maintain automation using scripting, APIs, IaC, and configuration management tools.
• Build and support CI/CD pipelines for infrastructure deployment, testing, and validation.
• Create automated pre/post-change validation to improve reliability and efficiency.
• Integrate security platforms with monitoring and deployment tooling for visibility and automation.

Skills

Network engineering

Network security

TCP/IP routing subnets

Scripting (Python/PowerShell/Bash)

REST APIs

CI/CD pipelines

Git-based workflows

Infrastructure as Code

Automation

DevOps

Communication & collaboration

Tools

Ansible

Palo Alto Panorama

GitHub Actions

Jenkins

GitLab CI/CD

Azure DevOps

Job description

At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers' evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Senior Consultant I - Network Security Engineering

Join our Network Security Engineering team and help secure and modernize critical enterprise infrastructure. As a Senior Consultant I, you will engineer, support, automate, and maintain network security platforms that protect the organization while improving reliability, scalability, and operational efficiency. We're looking for an experienced engineer with a strong foundation in networking and network security who enjoys solving complex technical challenges and leveraging automation to drive better outcomes. You'll work with technologies such as enterprise firewall platforms, Infrastructure as Code, CI/CD pipelines, APIs, scripting, and automation frameworks to streamline operations and enhance platform performance. This is a hands-on role for someone who takes ownership, works independently, and delivers high-quality engineering solutions with limited oversight. You'll troubleshoot complex network and security issues, implement infrastructure improvements, support automation initiatives, and contribute ideas that help advance the team's engineering practices.

Key Responsibilities

• Engineer, support, and maintain enterprise network security platforms, including Palo Alto Networks and related security technologies.
• Design, implement, test, and validate network security solutions across enterprise and cloud environments.
• Troubleshoot complex network, firewall, routing, connectivity, and application communication issues.
• Develop and maintain automation using scripting, APIs, Infrastructure as Code (IaC), and configuration management tools.
• Build and support CI/CD pipelines for infrastructure deployment, testing, validation, and configuration management.
• Create automated pre- and post-change validation processes to improve reliability, consistency, and operational efficiency.
• Integrate security platforms with monitoring, deployment, and operational tooling to enhance visibility and automation.
• Identify and automate repetitive operational tasks to reduce manual effort and improve platform scalability.
• Support platform lifecycle initiatives, including upgrades, vulnerability remediation, technology refreshes, and modernization efforts.
• Partner with network, cloud, security, and application teams to deliver secure, resilient, and scalable solutions.
• Contribute to technical reviews, process improvements, and engineering best practices while operating within established architecture and security standards.
• Develop and maintain technical documentation, operational procedures, scripts, and automation.
• Provide technical assistance and knowledge sharing to other members of the team.

Required Qualifications

• Strong background in network engineering and network security.
• Strong understanding of core networking technologies and concepts, including: TCP/IP, Routing, Subnetting, NAT, DNS, and application connectivity.
• Experience engineering, implementing, or supporting enterprise firewall and network security platforms.
• Experience with Infrastructure as Code concepts, practices, and version-controlled infrastructure.
• Hands-on experience developing scripts and automation for infrastructure engineering and operational use cases, including areas such as: Infrastructure change implementation, Configuration management, Pre-change and post-change validation, Infrastructure monitoring and health checks, Data collection and reporting, Operational troubleshooting, API-driven infrastructure management.
• Working knowledge of scripting or programming languages such as Python, PowerShell, Bash, or similar languages.
• Experience working with REST APIs or other programmatic interfaces to interact with and automate infrastructure platforms.
• Experience developing, maintaining, or working with CI/CD pipelines for infrastructure configuration and deployment.
• Experience using source control and version-control practices, such as Git-based development workflows.
• Experience troubleshooting complex infrastructure, network connectivity, and security issues.
• Ability to independently analyze technical requirements and implement solutions within established architecture and engineering standards.
• Ability to take ownership of assigned technical work and drive it through implementation and validation with limited oversight.
• Strong communication and collaboration skills with the ability to work across infrastructure, security, networking, cloud, and application teams.

Preferred Qualifications

• Hands-on experience with Ansible for infrastructure configuration, deployment, orchestration, or automation.
• Hands on experience with Palo Alto Networks Firewalls and Panorama or similar firewall platforms.
• Experience supporting network security infrastructure within AWS, Azure, or other public cloud environments.
• Strong understanding, VPN technologies, Network segmentation, and load balancing.
• Experience with CI/CD and automation technologies such as Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps, or similar platforms.
• Experience developing reusable automation frameworks, modules, or tooling for infrastructure engineering.
• Experience working within enterprise change-management and IT service-management processes.
• Experience working in a DevOps or product-oriented engineering environment.
• Experience modernizing traditional infrastructure platforms through automation and Infrastructure as Code.

Skills

• Automation
• DevOps
• Infrastructure As Code (IaC)
• Network Security Engineering
• Palo Alto Networks Panorama
• Red Hat Ansible

Compensation

Compensation offered for this role is 75,100.00 - 126,325.00 annually and is based on experience and qualifications.

The candidate(s) offered this position will be required to submit to a background investigation.

Joining our team isn't just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.

Allstate generally does not sponsor individuals for employment-based visas for this position.

Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.

For jobs in San Francisco, please click here for information regarding the San Francisco Fair Chance Ordinance.

For jobs in Los Angeles, please click here for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.

To view the EEO Know Your Rights poster click here. This poster provides information concerning the laws and procedures for filing complaints of violations of the laws with the Office of Federal Contract Compliance Programs.

To view the FMLA poster, click here. This poster summarizing the major provisions of the Family and Medical Leave Act (FMLA) and telling employees how to file a complaint.

This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.

Allstate provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse. Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs. When working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload. To help create a more personal and engaging experience, we ask that you join with your camera on if your interview is virtual. Please also have a Valid Photo Identification available at the start of your interview.

Allstaters are dedicated to serving clients, customers, and communities, which allows employees to find meaning and value in their work.

At Allstate, we work hard to help people live a good life every day. Allstaters are dedicated to serving clients, customers, and communities, which allows employees to find meaning and value in their work. Allstate helps protect nearly 16 million households with auto, home, life, and retirement products. We want every professional connected to Allstate to be committed to giving our customers the best and that means finding the best talent. We want you to be our next great addition.