Senior Cyber Security Engineer: Hybrid NAC & Firewall

1611 Ally Bank; Charlotte (NC); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Ally Financial is seeking a Network Security Engineer to help shape NAC strategy, monitor and block threats, and develop firewall policies. You will collaborate with IT and security teams to ensure secure network access and compliance.

The role requires hands-on experience with NAC, Cisco/ForeScout, Palo Alto firewalls, and scripting. This hybrid position invites candidates who can work in Charlotte, NC and remotely part of the week.

Qualifications

• Bachelor's degree in Computer Science, Computer Information Science, Engineering or related field or 3 years related experience.
• Minimum 3 years of Routing, Switching, VLAN, VPN, cloud security.
• 3 years of Network Access Control experience (Cisco or ForeScout).
• 3 years maintaining Firewalls & Threat Prevention rules and policies.
• 2 years supporting cloud firewalls and security groups.
• Experience with packet captures and troubleshooting, OSI model understanding.
• Experience with programming/scripting languages (Python, Go, Java).

Responsibilities

• Provide thought leadership on NAC strategy, policy, monitoring, alerting, reporting, and blocking.
• Develop and enhance NAC and Firewall policies based on network security needs.
• Address cybersecurity standards and regulatory requirements in business processes.
• Troubleshoot NAC, Palo Alto Firewalls, Threat Prevention, VPN and cloud firewalls.
• Manage daily security changes, documentation, audit requests, and rule base optimization.
• Identify security risks and coordinate remediation with security teams.

Skills

Routing & Switching

Network Access Control (NAC)

Firewalls & Threat Prevention

Cloud security

Packet captures

OSI model

Scripting (Python/Go/Java)

Education

Bachelor's Degree in CS/Engineering

Tools

ForeScout

Cisco

Palo Alto

VPN

Job description

Ally Financial is seeking a Network Security Engineer to help shape NAC strategy, monitor and block threats, and develop firewall policies. You will collaborate with IT and security teams to ensure secure network access and compliance.

The role requires hands-on experience with NAC, Cisco/ForeScout, Palo Alto firewalls, and scripting. This hybrid position invites candidates who can work in Charlotte, NC and remotely part of the week.