Senior Network Security Architect - Hybrid Cloud Defense

SWBC; United States; On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Work/Life balance

Career growth opportunities

401(k) retirement plans

Wellness program

Job summary

SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security across on-premises, cloud, and hybrid environments. This role owns or supports major security platforms, including firewalls, segmentation, VPNs, and telemetry, collaborating with cross-functional teams to ensure secure connectivity.

The ideal candidate has strong hands-on experience with Palo Alto and Cisco firewalls, AWS and Azure networking, production change

Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, IT, or a related field.
• Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
• Extensive experience designing, implementing, securing, and supporting enterprise network environments.
• Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
• Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
• Strong understanding of enterprise routing concepts, including BGP and OSPF.
• Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
• Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
• Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
• Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
• Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
• Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
• Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
• Working knowledge of security standards and control frameworks applicable to network and cloud security.
• Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
• Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
• Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
• AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
• Experience working in financial services or another regulated industry is preferred.

Responsibilities

• Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
• Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
• Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
• Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
• Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
• Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
• Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
• Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
• Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
• Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
• Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
• Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
• Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
• Participate in the defined on-call rotation and support major technical escalations.
• Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
• Own assigned network security platforms or major subsystems throughout their operational lifecycle.
• Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
• Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
• Support disaster recovery planning and testing for assigned network security platforms and services.
• Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
• Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
• Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
• Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
• Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
• Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
• Perform all other duties as assigned.

Skills

Palo Alto firewalls

Cisco firewalls

AWS networking

Azure networking

VPN technologies

IPsec VPN

BGP

OSPF

TCP/IP

VLANs

NAT

DNS

DHCP

IDS/IPS

SIEM

Terraform

CloudFormation

Ansible

Python

PowerShell

Education

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field

Tools

Terraform

CloudFormation

Ansible

Python

PowerShell

Job description

SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security across on-premises, cloud, and hybrid environments. This role owns or supports major security platforms, including firewalls, segmentation, VPNs, and telemetry, collaborating with cross-functional teams to ensure secure connectivity.

The ideal candidate has strong hands-on experience with Palo Alto and Cisco firewalls, AWS and Azure networking, production change