Senior network security engineer

Job Description

We are seeking a dynamic and experienced Vice President of Network Security to lead and enhance network security infrastructure across the AMER region. This strategic leadership role requires a deep technical understanding of network security and the ability to drive initiatives that protect systems while mentoring a talented engineering team.

Key Responsibilities

Infrastructure Oversight: Lead the design and administration of the AMER network security infrastructure, focusing on critical components including DNS, F5 Load Balancers, Fortinet and Palo Alto firewalls, VPNs, proxies, Remote Access, and DMZ connectivity.

Technology Initiatives: Drive technology projects aimed at enhancing cybersecurity and improving network performance in alignment with organizational goals.

Continuous Monitoring: Ensure optimal network performance through continuous monitoring and dashboard creation, promptly addressing any security incidents.

Documentation Management: Maintain comprehensive documentation including network security asset inventories, diagrams, procedures, and vendor contacts to support operational efficiency and communication.

Cross-Department Collaboration: Partner with infrastructure teams to resolve network-related challenges and ensure seamless operations across departments.

Audit and Security Coordination: Work closely with audit and IT Security teams in AMER and Head Office to provide documentation and implement remediation plans as required.

Staff Mentorship and Training: Mentor and train junior engineering staff, fostering a culture of growth and skill development within the team.

Vulnerability Assessments: Conduct vulnerability assessments and manage patching processes to effectively mitigate and report security risks.

Security Reporting: Develop and deliver regular security reports to leadership, highlighting key metrics, incidents, and trends.

LOD1 Security Management: Manage Line of Defense 1 (LOD1) network security controls and requests as specified by the IT Risk Department.

Strategy Alignment: Coordinate with AMER and Head Office IT Security teams to ensure alignment on security strategies and policies.

Tool Proficiency: Demonstrate proficiency in security tools such as SIEM, Splunk, Centreon, and Qualys for effective monitoring and incident response.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

Skills and Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; Master's preferred.

6+ years of hands-on experience in network security management, preferably within the financial services industry.

Extensive experience managing Cisco Firepower, Fortinet, and Palo Alto firewalls, including DMZ design and implementation.

Relevant certifications (Fortinet NSE 4/5, Palo Alto PCNSE, Cisco CCNP Enterprise/Security). Highly desirable: CISSP, CISM.

Strong project management and leadership experience.

Excellent communication and problem-solving skills, with a focus on collaboration and teamwork.

In-depth understanding of network technologies (L2, L3, VXLAN, BGP, LAN/WAN/VPN) and security technologies (firewall, load balancing, proxy, authentication).

Strong knowledge of DNS/DHCP, WSG (Web Security Gateways), Proxy-pac scripting.

Hands-on troubleshooting skills for network/security systems with minimal guidance, including OSI Layer 4 and 7 protocol analysis. Experience with Zero Trust Architecture and Network Access Control design.

Knowledge of Arista and Cisco design/configuration/automation is a plus.

Scripting experience (Python, PowerShell, Ansible) is highly valued.

Knowledge of micro-segmentation tools such as Illumio or VMware NSX is a plus.