Senior Network Security Engineer

Cboe Global Markets, Inc.; Overland Park (KS); Hybrid; USD 119,000 - 169,000; Full time

Benefits offered by this job

2:1 401(k) match

Tuition assistance

On-site gyms

Paid parental leave

Volunteer opportunities

Job summary

Cboe Global Markets, a leading market infrastructure provider, seeks a Sr. Network and Firewall Security Engineer to secure and operate connectivity across global offices and data centers.

You will design, deploy, and optimize Palo Alto firewall solutions in complex enterprise environments. The role requires hands-on expertise with Palo Alto CLI, routing protocols, and image-based troubleshooting, plus mentoring of junior engineers and collaboration with security and operations teams in a

Qualifications

• 7+ years of network and security engineering experience across enterprise routing, switching, and firewall platforms.
• 5+ years of hands-on experience managing Palo Alto firewalls, including SSL decryption and Panorama-based management.
• Strong experience with routing protocols (BGP, OSPF) and packet-level analysis in production environments.
• Deep understanding of TCP/IP, traffic flows, and structured troubleshooting across network and security domains.
• Knowledge of segmentation, zero-trust concepts, and secure architecture patterns.

Responsibilities

• Design, deploy, and migrate Palo Alto firewall solutions across global environments, including policy architecture, segmentation, SSL decryption, and centralized management.
• Lead complex security and network integrations applying core networking principles (BGP, OSPF, routing design, failover, traffic engineering).
• Collaborate with network, cloud, and infrastructure teams to design secure, scalable connectivity across on-prem and hybrid environments.
• Serve as senior escalation point, driving advanced troubleshooting across firewalls and underlying network infrastructure.
• Support network security operations and incident response, diagnosing routing, NAT, policy enforcement, and application behavior.
• Mentor engineers and NOC staff, reinforcing networking fundamentals and structured troubleshooting.
• Manage work intake and communicate clearly to technical stakeholders and leadership.
• Evaluate enhancements to security architecture and network design to improve reliability and security posture.

Skills

Network & security engineering

Palo Alto firewalls

SSL decryption

Troubleshooting & packet analysis

Routing protocols (BGP, OSPF)

Zero-trust / segmentation concepts

Scripting or API automation

Tools

Palo Alto Panorama

Palo Alto CLI

Arista or similar

AWS networking

Job description

Job Description

Building trusted markets — powered by our people

At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting‑edge trading, clearing and investment solutions to market participants around the world.

We’re building meaningful ways to support professional and personal development while strengthening the trust we’ve earned as a global market leader. Our teams are empowered to share ideas, actively pursue them and bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to “go for it” and equip our managers with the training to coach their teams to the next level. We strive to provide employees a safe space to network, share ideas and create opportunities.

PLEASE NOTE: To support strong partnership and team connection, this role follows a four day in office work model - in either our Overland Park, KS or Chicago, IL office.

Role Overview

The Network Security Team is seeking a Sr. Network and Firewall Security Engineer to secure and operate connectivity across global offices and data centers. This is a hands‑on role requiring deep expertise in Palo Alto firewalls, including design, deployment, migration, and ongoing optimization of security policies in complex enterprise environments. The engineer will partner across infrastructure teams to ensure secure, highly available connectivity, while also supporting internal and external stakeholders with a strong service mindset. Candidates must be self‑starters with strong critical thinking skills, capable of operating independently and taking ownership of complex problems from initial detection through resolution.

This role requires advanced troubleshooting capabilities, including hands‑on experience with Palo Alto CLI‑based debugging typical of Tier 2/Tier 3 TAC scenarios, as well as strong foundational networking knowledge across routing protocols and packet‑level analysis. The ideal candidate is a natural communicator who can drive problem resolution in large, cross‑functional settings, clearly articulate technical findings, and influence outcomes across engineering, security, and operations teams. Success also requires the ability to communicate effectively with senior leadership—translating deep technical issues, risks, and trade‑offs into concise, actionable insights—while mentoring junior engineers and helping elevate the overall capability of the team.

Your responsibilities will be:

• Design, deploy, and migrate Palo Alto firewall solutions across global environments, including architecture of security policies, segmentation, SSL decryption, and centralized management
• Lead complex security and network integrations by applying strong core networking principles (BGP, OSPF, routing design, failover, traffic engineering) to ensure resilient, high‑performance connectivity
• Partner with network, cloud, and infrastructure teams to design and implement secure, scalable connectivity across on‑prem and hybrid environments
• Serve as a senior escalation point, driving advanced troubleshooting across firewalls and underlying network infrastructure, including deep packet, flow, and session‑level analysis
• Support network security operations and incident response, diagnosing complex connectivity issues involving routing, NAT, policy enforcement, and application behavior
• Mentor engineers and NOC staff, reinforcing strong networking fundamentals, structured troubleshooting, and operational best practices
• Manage and prioritize work intake while delivering clear, direct communication to both technical stakeholders and senior leadership
• Evaluate and recommend enhancements to security architecture, firewall capabilities, and network design to continuously improve reliability and security posture

The ideal candidate has

Minimum Qualifications

• 7+ years of network and security engineering experience across enterprise routing, switching, and firewall platforms, with strong foundations in secure connectivity and network design
• 5+ years of hands‑on experience managing Palo Alto firewalls, including SSL decryption, security profiles, and Panorama‑based centralized management (required)
• Strong, demonstrated experience designing and troubleshooting complex network and security environments, including routing protocols (BGP, OSPF), NAT, and packet‑level analysis in production environments
• Deep understanding of TCP/IP, traffic flows, and structured troubleshooting methodologies across network and security domains
• Strong understanding of network security design principles, including segmentation, access control, and secure architecture patterns (zone‑based design, microsegmentation, zero‑trust concepts)
• Experience leading firewall migrations and contributing to enterprise network security architecture
• Experience with scripting or API‑driven automation to improve operational efficiency

Preferred Qualifications

• Experience across additional enterprise networking platforms and edge technologies, including Arista or similar environments, proxy platforms, load balancers (e.g., F5), and multi‑vendor infrastructure
• Experience with cloud networking and security, including AWS networking constructs and security controls, as well as edge security platforms such as Cloudflare or similar services
• Familiarity with modern application and container networking models, including Kubernetes networking, segmentation, and network policies
• Experience participating in or leading multi‑vendor infrastructure migrations in large‑scale environments
• Relevant industry certifications such as Palo Alto, Cisco, or equivalent

Benefits And Perks Of Working For Cboe Global Markets

We value the total wellbeing of our people – including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are a given at any organization. Still, you should know we offer:

• Fair and competitive salary and incentive compensation packages with an upside for overachievement
• Generous paid time off, including vacation, personal days, sick days and annual community service days
• Health, dental and vision benefits, including access to telemedicine and mental health services
• 2:1 401(k) match, up to 8% match immediately upon hire
• Discounted Employee Stock Purchase Plan
• Tax Savings Accounts for health, dependent and transportation
• Employee referral bonus program
• Volunteer opportunities to help you give back to your communities

Some of our associates’ favorite benefits and perks include:

• Complimentary lunch, snacks and coffee in any Cboe office
• Paid Tuition assistance and education opportunities
• Generous charitable giving company match
• Paid parental leave and fertility benefits
• On‑site gyms and discounts to other fitness centers

More About Cboe Global Markets

We’re reimagining the future of the workplace by focusing on what matters most, our people. Our journey is an inclusive one. We’re investing deeply in leadership programs and career development initiatives that ensure everyone has an equal chance to succeed.

We work with purpose, solving problems with ingenuity, collaboration, and a lot of passion. We’re an engaged and excited team connecting markets across borders and embracing growth in all its forms to achieve incredible outcomes.

Learn more about life at Cboe on our website and LinkedIn.

Equal Employment Opportunity

We're proud to be an equal opportunity employer do not discriminate against any employee or applicant for employment based on any legally protected characteristic, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, or Veteran status. We are committed to fostering a workplace where all individuals are valued and respected.

This position is not eligible for visa sponsorship.

Candidates must be legally authorized to work in the United States without the need for employer sponsorship now or in the future.

Salary Ranges (applicable for US locations only)

At Cboe, we are committed to providing a competitive, transparent, and market‑informed total rewards program. The anticipated base salary range for this role is $119,000-$169,400, with actual compensation determined by job‑related factors such as skills, relevant experience, education, internal alignment, and location.

This role may also be eligible for annual incentive compensation and, where applicable, participation in Cboe's long‑term equity programs.

Additional information about Cboe's total rewards program, including benefits and other compensation components, can be found here: Total Rewards at CBOE.

Any communication from Cboe regarding this position will only come from a Cboe recruiter who has a @cboe.com email or via LinkedIn Recruiter. Cboe does not use any other third party communication tools for recruiting purposes.