Senior NexGen Firewall & Security Architect

Arrowstreet Capital; Boston (MA); On-site; USD 110,000 - 315,000; Full time

Benefits offered by this job

Annual discretionary bonuses

Robust benefits package

Job summary

Arrowstreet Capital is seeking a hands-on Network Security Engineer to operate and continuously improve our NexGen firewall and VPN security policies. You will manage policy rules, threat prevention profiles, URL filtering, and logging while supporting secure remote access and incident response.

You will troubleshoot Layer 3–7 network security issues, perform packet captures, and contribute to AIOps-driven security improvements, with a focus on continuous posture enhancement and policy hygiene.

Qualifications

• Five or more years of hands-on experience in network security, firewall administration, security operations engineering, network engineering, or a closely related technical role.
• Strong working knowledge of NexGen firewall technologies, including next-generation firewalls, management portals, NexGen VPN, L7 application, User based ID’s, security profiles, and logging.
• Solid understanding of networking fundamentals, including TCP/IP, subnetting, routing, switching, DNS, DHCP, NAT, VPN, TLS, HTTP/S, and common enterprise network architectures.
• Experience implementing and troubleshooting firewall policies, traffic flows, application identification, URL filtering, threat prevention, decryption, and remote access controls.
• Experience supporting production change management, maintenance windows, firewall upgrades, rule-base changes, and operational troubleshooting in a business-critical environment.
• Strong documentation skills, including the ability to maintain clear runbooks, diagrams, implementation notes, incident summaries, and control evidence.

Responsibilities

• Administer, maintain, and improve NexGen firewall infrastructure, including policy rules, NAT, security profiles, zones, interfaces, objects, and routing configurations.
• Manage management portal configuration, templates, device groups, policy pushes, configuration backups, and rule-base hygiene across the environment.
• Configure and tune threat prevention, antivirus, anti-spyware, vulnerability protection, URL filtering, DNS security, sandboxing, decryption, and logging profiles.
• Support remote connectivity operations, including authentication flows, client connectivity, portal and gateway configuration, troubleshooting, and user-impacting incidents.
• Leverage advanced AI modeling within our SIEM platform to monitor firewall logs, traffic patterns, system health, policy hits, blocked activity, and IPS security events. Use AI to associate and contextualize threats detected by these alerts, uncover attack patterns, prioritize incidents based on risk, and identify policy gaps—enabling proactive tuning and continuous improvement of our security posture.
• Troubleshoot network security issues across Layer 3 through Layer 7, including routing, NAT, VPN, application identification, SSL decryption, asymmetric traffic, and policy-matching behavior.
• Perform packet captures, traffic analysis, and root-cause investigations using vendor tools, CLI diagnostics, logging platforms, and network troubleshooting utilities.
• Participate in firewall rule reviews, access request evaluations, segmentation efforts, cleanup activities, and control validation exercises.
• Expand the development and integration of advanced AI-powered features within AI Operations (AIOps) service platforms to proactively detect, diagnose, and remediate network and security issues. Drive this innovation by integrating AIOps solutions to strengthen incident management, optimize firewall performance, and enhance user experience across network capacity and routing.
• Plan and execute routine maintenance, including content updates, firmware upgrades, high-availability validation, license checks, and capacity monitoring.
• Partner with network engineering, infrastructure, cloud, identity, endpoint, and application teams to ensure security controls are integrated cleanly into enterprise technology changes.
• Maintain accurate operational documentation, diagrams, procedures, support runbooks, change records, and evidence for audit or control review purposes.

Skills

NexGen firewall technologies

Firewall policy management

Packet-level troubleshooting

Secure remote access

Incident response

AI concepts in security

Cloud security (Azure/AWS)

VPN connectivity

SIEM integrations

Documentation skills

Tools

Palo Alto Networks

Check Point

Fortinet

NexGen VPN

L7 application identification

Job description

Arrowstreet Capital is seeking a hands-on Network Security Engineer to operate and continuously improve our NexGen firewall and VPN security policies. You will manage policy rules, threat prevention profiles, URL filtering, and logging while supporting secure remote access and incident response.

You will troubleshoot Layer 3–7 network security issues, perform packet captures, and contribute to AIOps-driven security improvements, with a focus on continuous posture enhancement and policy hygiene.