Network Security Engineer

Job Title: Network Security Engineer
Location - Jersey City, NJ (client is from NY)

The ideal candidate will be knowledgeable with Integrating Automation (Python, LLM's) into the Network Security stack of tools and services. They will also have experience in: Management of Next-Generation Firewalls (Palo Alto & ZScaler preferred), Network Segmentation (Illumio preferred), WAF, IPS, NDR, NAC, etc. Most importantly, the ideal candidate must be extremely eager to learn new technologies and able to execute. The role will also have an opportunity to work with subject matter experts not only within security, but across infrastructure, network, development, and business teams.

We look to hire people who are comfortable working with minimal supervision as part of a team that consistently delivers ground-breaking and innovative solutions in one of the most exciting and fast-moving areas of the financial markets vertical. We need people who can prioritize and effectively communicate complex issues.

Primary Responsibilities

The Network Security Engineer will play a critical role in the architecture, development, deployment, and management of the firm's Network Security Program as part of the global information security team.

      •     Utilize LLM/AI and automation to build processes that improve/audit/secure the environment from a Network Security & Segmentation perspective.

      •     Work in conjunction with the Network Security Engineering team on the architecture, deployment, and management of the firm's global network segmentation deployment and strategy with a focus on security architecture.

      •     Deploy and implement network security through Palo Alto Firewalls and the Illumio product for Applications and Endpoints.

      •     Work independently and as part of a team to analyze and troubleshoot escalated issues for Palo Alto Firewalls, GlobalProtect VPN, Cloudflare WAF, Network Detection and Response technologies, Network Access Control, ISE, Web-Browser Isolation, Illumio, Network Security Policy Management, and other related Network Security Platforms. Efficiently troubleshoot/prioritize issues and create a culture of root cause analysis.

      •     Work closely with the Network Engineering and Operations teams and the Security Engineering and Operations teams to support and integrate security at every level into the network.

      •     Work with Infrastructure and Applications Teams to align Network Security Policies to the needs and expectations of each team and the company as a whole.

Required Background

      •     10+ years of technical experience in networking, network security.

      •     Experience with Automation, Python, LLM's.

      •     Working knowledge of building and implementing a network automation design that automates networking tasks across multiple vendors and platforms.

      •     Significant experience with Computer Networks, Firewalls (Palo Alto) including GlobalProtect, Security Policies, Micro-Segmentation (Illumio), WAF (Cloudflare or equivalent), NAC (Cisco ISE or equivalent), etc. Proficient with network troubleshooting tools (sniffer, syslog, NetFlow, TCPDUMP, Wireshark, etc.)

      •     Demonstrated knowledge of Intrusion Detection, Incident Response, Data Encryption, Network Access Controls, Threat Management, and proper IT-related Security Controls.

      •     Working knowledge of the OSI model, subnetting, including CIDR notation.

      •     Manage multiple projects simultaneously and adapt to changing business needs.

      •     Work well with cross-functional global and remote teams.

      •     Self-disciplined, self-starter who can provide leadership and mentor others while resolving complex incidents and delivering projects.

      •     Ability to analyze complex problems, propose effective solutions, and understand and apply business vision and direction.

      •     Ability to be called upon 24/7 in case of emergencies.

      •     Ability and willingness to learn new things in a fast-paced environment.

Desirable Skills

      •     Hands-on experience deploying and managing an Illumio environment. Illumio Core Associate/Specialist/Expert: SaaS or On-Prem, CCNA/CCNP Routing & Switching, Palo Alto Networks Security certifications (PCNSE), Security+, CCNA Security, or CISSP.

      •     Previous experience with Checkpoint, Fortinet, Proofpoint, Cloudflare, F5 Silverline, SSL Certificate management, Palo Alto Networks Prisma Access, or other Zero Trust/SASE products a plus.