Senior Network Security Architect – Remote & Automation

Switch; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Generous benefits package

Remote opportunities

Job summary

Switch is seeking a Senior Network Security Engineer to design and implement advanced network security solutions protecting its critical infrastructure. You will lead projects from architecture through implementation, mentor engineers, and drive automation initiatives across teams.

Ideal candidates bring 8+ years in network engineering (or 4+ years with CCIE), expertise in firewall environments, routing, switching, and experience with IaC and APIs.

Qualifications

• 8+ years of network engineering experience, or 4+ years with CCIE certification.
• 6+ years implementing advanced network security projects and solutions.
• 2+ years of experience implementing network automation.
• Deep understanding of network segmentation architectures and technologies.
• Advanced experience designing, deploying, and managing Palo Alto Networks Next-Generation Firewall environments.
• Advanced experience designing, deploying, and maintaining OSPF and BGP.
• Experience leading complex network security engineering initiatives and proofs of concept.
• Experience with Infrastructure-as-Code methods for network automation, configuration management, and provisioning.
• Experience using Terraform.
• Experience designing, deploying, and managing public cloud networks.
• Experience designing and managing enterprise routing and switching technologies.
• Experience developing and maintaining network architecture designs and technical documentation.
• Experience with intrusion prevention and advanced threat prevention technologies.
• Experience with application tunneling and reverse proxy technologies.
• Working knowledge of encryption protocols and security controllers.
• Experience with Python or another programming language used for network engineering and automation.
• Experience with source control systems and CI/CD pipelines.
• Experience working with APIs and system integrations.
• Working knowledge of Linux.
• Experience with Cisco IOS-XE and NX-OS.
• Experience with VPN and tunneling technologies and protocols.
• Experience analyzing packet captures and network device logs.
• Experience securing network data, control, and management planes.
• Experience with authentication, authorization, and accounting protocols and applications.

Responsibilities

• Lead complex network security engineering projects from technical evaluation and architecture through implementation.
• Design and implement network security solutions aligned with Switch security and infrastructure requirements.
• Assess existing network architectures and recommend improvements to security, performance, scalability, reliability, and operational efficiency.
• Design enterprise network segmentation strategies, including macro- and micro-segmentation.
• Design and deploy Palo Alto Networks Next-Generation Firewall architectures.
• Establish standards and best practices for network security device deployment, configuration, maintenance, and lifecycle management.
• Evaluate emerging technologies, products, and industry practices and recommend solutions based on technical fit, risk, scalability, and cost.
• Lead proofs of concept and technical evaluations for new network security capabilities.
• Conduct network security assessments, prioritize identified risks, and lead remediation efforts.
• Implement and maintain intrusion prevention and advanced threat prevention technologies.
• Develop and expand network automation using Infrastructure-as-Code, APIs, programming, and other automation frameworks.
• Establish standards for network architecture, engineering, configuration, and project documentation.
• Develop and maintain network security policies, standards, and procedures.
• Collaborate across Network Engineering, Security, Infrastructure, Operations, and other teams on complex technical initiatives.
• Serve as a senior escalation point and technical resource for Network Engineer I, II, and III team members.
• Mentor engineers through technical guidance, design reviews, troubleshooting, and knowledge sharing.
• Develop technical documentation and training materials that strengthen engineering capabilities across the team.
• Maintain software and security updates across network security devices and platforms.
• Provide advanced troubleshooting and incident escalation support.
• Participate in the network security on-call rotation.

Skills

Network engineering

Network automation

Python programming

APIs & integrations

Linux

CI/CD

Packet analysis

Education

CCIE-level certification

Tools

Terraform

Cisco IOS-XE

NX-OS

VMware NSX Gateway

Cloudflare proxy

Job description

Switch is seeking a Senior Network Security Engineer to design and implement advanced network security solutions protecting its critical infrastructure. You will lead projects from architecture through implementation, mentor engineers, and drive automation initiatives across teams.

Ideal candidates bring 8+ years in network engineering (or 4+ years with CCIE), expertise in firewall environments, routing, switching, and experience with IaC and APIs.