Network Security Infrastructure Engineer

Title: Network Security Infrastructure Engineer
Location: Plano, TX (Hybrid)

Duration: 24 months

Note: Senior profile 15+ Year Experience.

Job Description:

The Network Security Infrastructure Engineer is responsible for the design, engineering, implementation, and support of enterprise network security solutions, including firewalls, web proxy, and content filtering technologies. This role supports Service Request Fulfilment while ensuring alignment with enterprise architecture, security policies, standards, and operational procedures. The engineer will translate business requirements into secure, scalable technical solutions and execute changes in accordance with established ITIL and Change Management practices. This position interfaces directly with internal stakeholders, external suppliers/providers, architecture, product engineering, product management, operations, and business management and may interact with senior management as needed.

Key Responsibilities:

• Manage and fulfil network security service requests across firewall, proxy, and malware/content filtering platforms, including maintaining queue health and data quality standards.
• Analyze incoming requests to understand business and technical requirements, prioritize delivery dates, and schedule/execute changes within approved change windows.
• Assist in translating business requirements into technical designs aligned with enterprise architecture, security baselines, and policy standards to ensure successful production implementation.
• Create, modify, and implement firewall rules, NAT rules, object groups, proxy policies, malware/content filtering configurations, and related network security changes.
• Perform design validation, peer reviews, and pre-work/testing in non-production environments, when necessary, prior to production deployment.
• Represent and facilitate requests through Enterprise Change Management processes and ensure adherence to bank standards, guidelines, and SLAs.
• Support incident resolution and service restoration through appropriate configuration changes in coordination with internal teams, customers, suppliers, and vendors.
• Collaborate with architecture, engineering, network operations, and clients on design requirements, standards, impact assessments, and production support transitions.
• Act as a consultant and subject matter expert for network security technologies and contribute feedback to architecture and engineering strategy discussions.
• Contribute to automation, templates, playbooks, and continuous improvement initiatives that drive implementation efficiency and operational consistency.
• 5-10 years of experience in Network Services, Network Security, Infrastructure Engineering, or related technical disciplines.
• Hands-on experience with firewall technologies such as Fortinet and Check Point.
• Experience directly managing Web Content Filtering/Proxy infrastructure in forward and reverse proxy configurations.
• Experience supporting network security technologies such as firewalls, content inspection, malware inspection, and related platforms.
• Ability to add, modify, and delete firewall rules, NAT rules, and object groups.
• Advanced experience managing, configuring, and troubleshooting content inspection / delivery technologies such as Radware, Alteon, FireEye, or similar.
• Knowledge of authentication and directory protocols such as Kerberos, LDAP, IWA, IWA-direct, SSO, and Active Directory.
• Strong understanding of network-based technologies and protocols, including LAN, WAN, routing, and switching fundamentals.
• Excellent customer-facing communication skills, including the ability to interact with stakeholders at all levels and effectively manage expectations and escalations.
• Strong analytical, troubleshooting, and problem-solving skills with the ability to translate business requirements into business-aligned technical solutions.
• Ability to manage short- and long-term engagements with multiple project tracks and teams in parallel.
• Firm understanding of IT Service Management, including Request, Incident, Change, and Problem Management; familiarity with ITIL and Agile practices.
• Leadership qualities including self-starter mindset, ownership, accountability, organization, and attention to detail.
• Industry certifications such as Fortinet NSE (1-8), Check Point CCTA/CCTE/CCSA/CCSE, Cisco CCNA/CCNP/CCIE, or equivalent experience.
• Professional certifications in network security or web content filtering technologies such as CISSP, CCSP, CEH, BCCPA, BCCPP, or similar.
• Experience with Bluecoat Management Center, ProxySG, BCAAA, McAfee Web Gateway, McAfee DLP, Netskope, F5 SSLO, or similar technologies.
• Skills in scripting and automation, including Python, Ansible, PowerShell, REST/SOAP, Expect, or Rancid.
• Experience working in Agile environments and in networking-related disciplines within design, implementation, or operations roles.
• Experience within financial services or other highly regulated enterprise environments.
• Familiarity with additional technologies such as Splunk, ECSL, WAN, MAN, LAN, Optical, Proxy/Threat Prevention, DDI, Load Balancing, and AAA.
• ITIL certification preferred.