Senior Information Security Engineer (REMOTE)

Hanover Insurance Group, Inc.; Worcester, Northern (MA, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision, life, and dis

401K with a company match

PTO

On-site medical/wellness center (Worc—

Job summary

The Hanover Insurance Group is seeking a Senior Information Security Engineer to design, implement, and operate PKI, certificate lifecycle, and firewall/web proxy services in a secure enterprise environment. Remote flexibility is available from Worcester, MA or fully remote.

You will automate with Python/Bash/PowerShell, mentor junior staff, and collaborate with security, network, and cloud teams to strengthen our security posture and operational resilience.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity, or equivalent experience.
• 7+ years in Information Security, Network Security, or Infra Engineering roles.
• Expertise in PKI, CA, certificate lifecycle, and TLS/SSL.
• Hands-on with enterprise firewall platforms (Palo Alto, Check Point, Cisco Firepower, Fortinet).
• Experience with Web Proxy technologies (Zscaler, ProxySG, Netskope).
• Strong TCP/IP networking, DNS, VPNs, load balancing, and network security architecture.
• Scripting/automation experience: Python, Bash, PowerShell, Ansible, Terraform.
• Experience with security monitoring, logging, and event analysis tools.
• Understanding LDAP/AD/Kerberos/SAML/OAuth and certificate-based authentication.

Responsibilities

• Lead PKI and certificate management design, availability, scalability, and compliance.
• Own certificate lifecycle process across on-premises and cloud environments.
• Lead Firewall services architecture, policy management, and hardening.
• Manage Web Proxy solutions, policy development, URL filtering, TLS inspection.
• Provide advanced network/security troubleshooting for complex issues.
• Partner with engineering teams to design secure network architectures.
• Develop automation to improve operational efficiency and reduce manual tasks.
• Create monitoring, alerting, and remediation workflows for security platforms.
• Maintain Linux-based security platforms: hardening, patching, vulnerability remediation.
• Lead security infrastructure projects end-to-end and mentor juniors.
• Perform risk assessments and configuration reviews to identify improvements.
• Document technical standards for PKI, firewalls, proxies, and Linux.
• Support incident response with deep technical expertise.
• Evaluate emerging security technologies and provide recommendations.

Skills

PKI

Certificate lifecycle management

Firewall administration

Web Proxy

Linux security

Python

Bash

PowerShell

Ansible

Terraform

Automation

TLS/SSL

LDAP/AD/Kerberos/SAML/OAuth

Network troubleshooting

On-call support

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or equivalent experience

Tools

Palo Alto

Check Point

Cisco Firepower

Fortinet

Zscaler

Blue Coat/Symantec ProxySG

Netskope

Ansible

Terraform

Job description

Senior Information Security Engineer (REMOTE)

Worcester, MA, USA

Job Description

Posted Thursday, August 20, 2026 at 4:00 AM

For more than 170 years, The Hanover has been committed to delivering on our promises and being there when it matters the most. We live our values every day, demonstrating we CARE through our values, Sustainability initiatives and inclusive corporate culture .

We are seeking a highly skilled Senior Information Security Engineer to join our IT Security organization in Worcester, MA or in a remote capacity.

POSITION SUMMARY:

The Senior Security Engineer is a technical leader responsible for the design, implementation, operation, automation, and continuous improvement of enterprise security infrastructure services. This role serves as the subject matter expert for Public Key Infrastructure (PKI), certificate lifecycle management, firewalls, web proxy services, Linux-based security platforms, and network security operations.

The individual will lead strategic initiatives, provide advanced troubleshooting support, develop automation solutions, and partner with infrastructure, networking, cloud, and application teams to ensure secure and resilient enterprise services.

This is a full-time, exempt position.

IN THIS ROLE, YOU WILL:

• Lead the design, implementation, administration, and optimization of enterprise PKI and certificate management services, ensuring availability, scalability, and compliance with security standards.
• Own the certificate lifecycle management process, including issuance, renewal, revocation, discovery, monitoring, and remediation of expiring certificates across on-premises and cloud environments.
• Serve as the technical lead for Firewall services, including architecture, policy management, rule reviews, segmentation strategies, and security hardening.
• Manage and support enterprise Web Proxy solutions, including policy development, URL filtering, SSL/TLS inspection, access controls, and threat protection capabilities.
• Provide advanced network and security troubleshooting expertise, identifying and resolving complex connectivity, authentication, routing, DNS, TLS, and application communication issues.
• Partner with Network Engineering teams to design secure network architectures and implement security controls that align with business and regulatory requirements.
• Develop and maintain automation solutions using scripting and programming languages such as Python, Bash, PowerShell, or similar technologies to improve operational efficiency and reduce manual processes.
• Create automated monitoring, alerting, and remediation workflows for security infrastructure platforms and services.
• Administer and support Linux-based security platforms, ensuring system performance, hardening, patching, vulnerability remediation, and operational stability.
• Lead security infrastructure projects from planning through implementation, coordinating activities across multiple technical teams and stakeholders.
• Perform security assessments and configuration reviews to identify risks, vulnerabilities, and opportunities for service improvement.
• Develop and maintain technical standards, operational procedures, and architecture documentation for PKI, firewalls, proxy services, and Linux environments.
• Support incident response activities by providing deep technical expertise during security investigations, service outages, and cyber events.
• Evaluate emerging technologies and security solutions, making recommendations to improve the organization's security posture and operational effectiveness.
• Implement and maintain security controls supporting regulatory, audit, and compliance requirements.
• Provide technical leadership and mentorship to junior engineers and operations personnel, promoting best practices and knowledge sharing.
• Collaborate with cloud, infrastructure, and application teams to integrate security services into enterprise and cloud-native environments.
• Participate in on-call rotations and escalation support, serving as a senior resource for critical security and infrastructure incidents.

WHAT YOU NEED TO APPLY:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or equivalent experience.
• 7+ years of experience in Information Security, Network Security, or Infrastructure Engineering roles.
• Demonstrated expertise in PKI, Certificate Authorities (CA), certificate lifecycle management, and TLS/SSL technologies.
• Extensive hands-on experience managing enterprise firewall platforms (e.g., Palo Alto, Check Point, Cisco Firepower, Fortinet, or similar).
• Strong experience supporting Web Proxy technologies such as Zscaler, Blue Coat/Symantec ProxySG, Netskope, or similar platforms.
• Advanced knowledge of TCP/IP networking, routing, switching, DNS, DHCP, VPNs, load balancing, and network security architecture.
• Strong expertise with Linux operating systems, including system administration, troubleshooting, performance tuning, and security hardening.
• Demonstrated experience developing automation using Python, Bash, PowerShell, Ansible, Terraform, or similar technologies.
• Experience with security monitoring, logging, and event analysis tools.
• Strong understanding of authentication and authorization technologies including LDAP, Active Directory, Kerberos, SAML, OAuth, and certificate-based authentication.
• Proven ability to troubleshoot complex, multi-tier application and network issues.
• Excellent written, verbal, and interpersonal communication skills.
• Authorization to work in the United States without current or future sponsorship (U.S. citizen or lawful permanent resident).

BONUS POINTS FOR:

• Industry certifications such as CISSP, GIAC, Security+, CCNP Security, PCNSE, AWS Security Specialty, or equivalent.
• Experience with cloud security platforms including Microsoft Azure, AWS, and Google Cloud.
• Knowledge of Infrastructure as Code (IaC) and DevSecOps practices.
• Experience with enterprise vulnerability management and security compliance programs.
• Familiarity with container technologies, Kubernetes, and cloud-native security architectures.

CAREER DEVELOPMENT:

It’s not just a job, it’s a career, and we are here to support you every step of the way. We want you to be successful and fulfilled. Through on-the-job experiences, personalized coaching and our robust learning and development programs, we encourage you – at every level – to grow and develop.

BENEFITS:

We offer comprehensive benefits to help you be healthy, build financial security, and balance work and home life. At The Hanover, you’ll enjoy what you do and have the support you need to succeed.

Benefits include:

• Medical, dental, vision, life, and disability insurance
• 401K with a company match
• PTO
• Cultural Awareness Day in support of IDE
• On-site medical/wellness center (Worcester only)

The Hanover values diversity in the workplace and among our customers. The company provides equal opportunity for employment and promotion to all qualified employees and applicants on the basis of experience, training, education, and ability to do the available work without regard to race, religion, color, age, sex/gender, sexual orientation, national origin, gender identity, disability, marital status, veteran status, genetic information, ancestry or any other status protected by law.

Furthermore, The Hanover Insurance Group is committed to providing an equal opportunity workplace that is free of discrimination and harassment based on national origin, race, color, religion, gender, ancestry, age, sexual orientation, gender identity, disability, marital status, veteran status, genetic information or any other status protected by law.”

As an equal opportunity employer, Hanover does not discriminate against qualified individuals with disabilities. Individuals with disabilities who wish to request a reasonable accommodation to participate in the job application or interview process, or to perform essential job functions, should contact us at: [e-mail] and include the link of the job posting in which you are interested.

Compensation:

The target hiring range for this role may vary based on geographic location and other factors, including merit or performance, demonstrated proficiency, skills for the role, education, travel requirements, and experience. Additional compensation may include an annual bonus (which could take the form of a general bonus, sales incentive, or short-term incentive), long-term incentive or spot recognition awards. The posted range reflects our ability to hire at different position titles and levels depending on background and experience.