Summary
The Senior Network Security Engineer will design, operate, and automate network security controls across enterprise, multi-cloud, and retail edge environments. This hybrid Seattle role focuses on cloud security, zero-trust access, firewall policy lifecycle, automation and incident response while partnering with platform and application teams. The engineer will also contribute to architecture reviews, documentation, and mentor other engineers.
Responsibilities
- Design, deploy, and operate network security controls across enterprise, cloud (AWS, Azure, GCP), and edge environments
- Implement and maintain ZTNA, microsegmentation, and perimeter security using tools like Zscaler and next-gen firewalls
- Build and maintain automation pipelines for security policy management and firewall rule lifecycle
- Collaborate with cloud, platform, and application teams to integrate security at the network layer
- Monitor, triage, and respond to network security events and drive root cause analysis
- Author runbooks, threat models, and engineering documentation; participate in architecture reviews
- Participate in on-call rotation and mentor engineers on security best practices
Requirements
- Bachelor's or master's degree in Computer Science, Engineering, Cybersecurity or equivalent experience
- 7+ years of enterprise security engineering experience with depth in network security
- Hands-on cloud security experience across two or more major cloud platforms and cloud NGFW/VPC controls
- Strong automation and IaC skills (Python, Terraform, Ansible) and experience with policy-as-code and CI/CD
- Deep expertise in next-gen firewalls, ZTNA/SWG, IDS/IPS, and DDoS mitigation
- Working knowledge of authentication and authorization frameworks including 802.1X, RADIUS, SAML, OAuth, and PKI
- Solid networking fundamentals: TCP/IP, BGP, SD-WAN, VLANs, DNS, and routing protocols