Senior Network Security Engineer

SWBC Professional Employer Services V; San Antonio (TX); On-site; USD 120,000 - 190,000; Full time

Job summary

SWBC seeks a Senior Network Security Engineer to design, implement, operate, and improve enterprise security controls across on‑premises, cloud, and hybrid environments, owning firewalls, segmentation, VPNs, and secure cloud connectivity.

You will collaborate with Network Operations, Cloud Operations, Security Operations, and development teams to ensure secure, resilient connectivity, contribute to incident resolution, change control, and documentation, and mentor engineers.

Qualifications

• Strong knowledge of enterprise network security architecture and practices.
• Experience designing, implementing, and operating firewall, VPN, and cloud connectivity solutions.
• Familiarity with governance and compliance frameworks (PCI DSS, SOC 2, NIST).

Responsibilities

• Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
• Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls and related policies.
• Design and implement network segmentation and isolation controls to reduce attack surfaces.
• Perform firewall migrations, upgrades, and complex troubleshooting and optimization.
• Develop and maintain network security standards, documentation, and runbooks.
• Coordinate remote-access VPN and site-to-site IPsec connectivity and ensure secure connectivity among offices, data centers, and cloud environments.

Skills

Palo Alto Networks

Cisco firewalls

Enterprise routing

AWS networking

Azure networking

Incident resolution

Change management

Network security

Tools

ServiceNow

Job description

SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.

The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands‑on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.

Why you'll love this role:

This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid‑cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC's enterprise environment.

Essential duties include the following:

• Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
• Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access‑control policies.
• Design and implement network segmentation, micro‑segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
• Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
• Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
• Design, implement, and troubleshoot remote‑access VPN solutions and site‑to‑site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
• Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third‑party organizations.
• Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
• Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
• Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
• Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
• Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident‑response workflows.
• Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root‑cause analysis and corrective actions.
• Participate in the defined on‑call rotation and support major technical escalations.
• Support compliance and audit activities by maintaining controls, producing audit‑ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
• Own assigned network security platforms or major subsystems throughout their operational lifecycle.
• Plan, sponsor, present, test, validate, implement, and review non‑trivial production changes through established change‑control processes, including appropriate rollback plans.
• Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
• Support disaster recovery planning and testing for assigned network security platforms and services.
• Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
• Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
• Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
• Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
• Communicate complex technical and security concepts effectively to technical and non‑technical stakeholders.
• Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
• Perform all other duties as