Senior Network Security Engineer

Switch; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Generous benefits package

Remote opportunities

Job summary

Switch is seeking a Senior Network Security Engineer to design and implement advanced network security solutions protecting its critical infrastructure. You will lead projects from architecture through implementation, mentor engineers, and drive automation initiatives across teams.

Ideal candidates bring 8+ years in network engineering (or 4+ years with CCIE), expertise in firewall environments, routing, switching, and experience with IaC and APIs.

Qualifications

• 8+ years of network engineering experience, or 4+ years with CCIE certification.
• 6+ years implementing advanced network security projects and solutions.
• 2+ years of experience implementing network automation.
• Deep understanding of network segmentation architectures and technologies.
• Advanced experience designing, deploying, and managing Palo Alto Networks Next-Generation Firewall environments.
• Advanced experience designing, deploying, and maintaining OSPF and BGP.
• Experience leading complex network security engineering initiatives and proofs of concept.
• Experience with Infrastructure-as-Code methods for network automation, configuration management, and provisioning.
• Experience using Terraform.
• Experience designing, deploying, and managing public cloud networks.
• Experience designing and managing enterprise routing and switching technologies.
• Experience developing and maintaining network architecture designs and technical documentation.
• Experience with intrusion prevention and advanced threat prevention technologies.
• Experience with application tunneling and reverse proxy technologies.
• Working knowledge of encryption protocols and security controllers.
• Experience with Python or another programming language used for network engineering and automation.
• Experience with source control systems and CI/CD pipelines.
• Experience working with APIs and system integrations.
• Working knowledge of Linux.
• Experience with Cisco IOS-XE and NX-OS.
• Experience with VPN and tunneling technologies and protocols.
• Experience analyzing packet captures and network device logs.
• Experience securing network data, control, and management planes.
• Experience with authentication, authorization, and accounting protocols and applications.

Responsibilities

• Lead complex network security engineering projects from technical evaluation and architecture through implementation.
• Design and implement network security solutions aligned with Switch security and infrastructure requirements.
• Assess existing network architectures and recommend improvements to security, performance, scalability, reliability, and operational efficiency.
• Design enterprise network segmentation strategies, including macro- and micro-segmentation.
• Design and deploy Palo Alto Networks Next-Generation Firewall architectures.
• Establish standards and best practices for network security device deployment, configuration, maintenance, and lifecycle management.
• Evaluate emerging technologies, products, and industry practices and recommend solutions based on technical fit, risk, scalability, and cost.
• Lead proofs of concept and technical evaluations for new network security capabilities.
• Conduct network security assessments, prioritize identified risks, and lead remediation efforts.
• Implement and maintain intrusion prevention and advanced threat prevention technologies.
• Develop and expand network automation using Infrastructure-as-Code, APIs, programming, and other automation frameworks.
• Establish standards for network architecture, engineering, configuration, and project documentation.
• Develop and maintain network security policies, standards, and procedures.
• Collaborate across Network Engineering, Security, Infrastructure, Operations, and other teams on complex technical initiatives.
• Serve as a senior escalation point and technical resource for Network Engineer I, II, and III team members.
• Mentor engineers through technical guidance, design reviews, troubleshooting, and knowledge sharing.
• Develop technical documentation and training materials that strengthen engineering capabilities across the team.
• Maintain software and security updates across network security devices and platforms.
• Provide advanced troubleshooting and incident escalation support.
• Participate in the network security on-call rotation.

Skills

Network engineering

Network automation

Python programming

APIs & integrations

Linux

CI/CD

Packet analysis

Education

CCIE-level certification

Tools

Terraform

Cisco IOS-XE

NX-OS

VMware NSX Gateway

Cloudflare proxy

Job description

At Switch, we don’t just design, build and operate data centers—we are enabling the technology of the future. Led by Founder & CEO, Rob Roy, we believe in revolutionary innovation, operational excellence and the principle of karma. Switch is where talented people come together to EVOLVE the digital world.

We believe that innovation isn’t just about technology—it’s about the people, culture, and purpose that make it happen. Every Switch team member contributes to a mission greater than themselves: to create the world’s most advanced digital infrastructure that powers the progress of humanity.

The Role: Senior Network Security Engineer

The Senior Network Security Engineer designs and implements complex network security solutions that protect Switch’s critical infrastructure. This role leads technical initiatives, evaluates emerging technologies, establishes engineering standards, and improves the security, resiliency, and scalability of Switch’s network environments.

You will serve as a senior technical resource and subject matter expert, partnering across teams to solve complex network security challenges and expand automation. You will also mentor engineers, provide advanced escalation support, and participate in the network security on-call rotation.

What You’ll Do

• Lead complex network security engineering projects from technical evaluation and architecture through implementation.
• Design and implement network security solutions aligned with Switch security and infrastructure requirements.
• Assess existing network architectures and recommend improvements to security, performance, scalability, reliability, and operational efficiency.
• Design enterprise network segmentation strategies, including macro- and micro-segmentation.
• Design and deploy Palo Alto Networks Next-Generation Firewall architectures.
• Establish standards and best practices for network security device deployment, configuration, maintenance, and lifecycle management.
• Evaluate emerging technologies, products, and industry practices and recommend solutions based on technical fit, risk, scalability, and cost.
• Lead proofs of concept and technical evaluations for new network security capabilities.
• Conduct network security assessments, prioritize identified risks, and lead remediation efforts.
• Implement and maintain intrusion prevention and advanced threat prevention technologies.
• Develop and expand network automation using Infrastructure-as-Code, APIs, programming, and other automation frameworks.
• Establish standards for network architecture, engineering, configuration, and project documentation.
• Develop and maintain network security policies, standards, and procedures.
• Collaborate across Network Engineering, Security, Infrastructure, Operations, and other teams on complex technical initiatives.
• Serve as a senior escalation point and technical resource for Network Engineer I, II, and III team members.
• Mentor engineers through technical guidance, design reviews, troubleshooting, and knowledge sharing.
• Develop technical documentation and training materials that strengthen engineering capabilities across the team.
• Maintain software and security updates across network security devices and platforms.
• Provide advanced troubleshooting and incident escalation support.
• Participate in the network security on-call rotation.

What We’re Looking For

• You lead complex technical initiatives with clear ownership from architecture through implementation.
• You evaluate solutions across security, reliability, scalability, performance, operational impact, and cost.
• You communicate complex technical concepts clearly to both technical and non-technical stakeholders.
• You identify security and operational risks early and develop practical solutions.
• You work independently while building strong partnerships across technical teams.
• You troubleshoot complex issues methodically and follow them through resolution.
• You establish standards that improve consistency, security, and operational reliability.
• You share technical knowledge and help other engineers develop their capabilities.
• You look for practical opportunities to reduce manual work through automation.
• You stay current with emerging technologies and apply them when they solve a clear business or technical need.

What You’ll Bring

Required Qualifications

• 8+ years of network engineering experience, or 4+ years of relevant experience with a CCIE-level certification.
• 6+ years of experience implementing advanced network security projects and solutions.
• 2+ years of experience implementing network automation.
• Deep understanding of network segmentation architectures and technologies.
• Advanced experience designing, deploying, and managing Palo Alto Networks Next-Generation Firewall environments.
• Advanced experience designing, deploying, and maintaining OSPF and BGP.
• Experience leading complex network security engineering initiatives and proofs of concept.
• Experience with Infrastructure-as-Code methods for network automation, configuration management, and provisioning.
• Experience using Terraform.
• Experience designing, deploying, and managing public cloud networks.
• Experience designing and managing enterprise routing and switching technologies.
• Experience developing and maintaining network architecture designs and technical documentation.
• Experience with intrusion prevention and advanced threat prevention technologies.
• Experience with application tunneling and reverse proxy technologies.
• Working knowledge of encryption protocols and security controllers.
• Experience with Python or another programming language used for network engineering and automation.
• Experience with source control systems and CI/CD pipelines.
• Experience working with APIs and system integrations.
• Working knowledge of Linux.
• Experience with Cisco IOS-XE and NX-OS.
• Experience with VPN and tunneling technologies and protocols.
• Experience analyzing packet captures and network device logs.
• Experience securing network data, control, and management planes.
• Experience with authentication, authorization, and accounting protocols and applications.

Preferred Qualifications

• Experience with VMware NSX Gateway and Distributed Firewall technologies.
• Experience with Cisco ISE and 802.1X.
• Experience with Cisco Cyber Vision.
• Experience with Cloudflare proxy technologies.
• Experience with enterprise load balancing technologies.
• CCNP certification.

We recognize that qualified candidates may not meet every preferred qualification. If your experience aligns with the core responsibilities of the role, we encourage you to apply.

Why Switch?

A Culture of Karma – We are self-motivated by karma, ensuring our actions contribute to a positive, supportive and forward-thinking environment.

Industry Leading Designs – Work with the most advanced data center technology on the planet and be a part of emerging technology development.

Flexibility & Remote Opportunities – Whether in-office, hybrid, or fully remote, we offer the technology and support to keep teams connected and productive.

Career Stability & Growth – In this expanding industry, we invest in our people, providing opportunities & advancement in a stable, growing company.

Generous Benefits Package - Switch provides comprehensive coverage for you and your family that can be tailored to fit your personal needs, and more!

Join Us & Make a Difference

This is more than a job—it’s a mission. If you’re ready to be part of a culture that values innovation, karma, and limitless potential, we want to hear from you.