Cloud Network Security Engineer

Overview

This position will be reporting directly to the deputy CISO on the Information Security Team within the Enterprise Technology Organization.  The Cloud Network Security Engineer will serve on the Information Security team within the Enterprise Technology Organization and will be responsible for the secure design, implementation, and ongoing operation of the firm’s cloud and secure access networking controls. This role partners closely with Network, Cloud, and Application teams to strengthen the enterprise security posture through scalable architecture, strong operational discipline, and rapid incident response.

This is a dynamic team that has primary and secondary duties, and this role will additionally be cross trained in all areas of Information Security. 

We currently operate in a hybrid working model, whereby you will be required to work in-office 4 days per week.  

Location(s): Charlotte, NC

Responsibilities

• Owns and configures the enterprise SASE and cloud firewalls, boundary gateways, and other related systems
• Supports the deputy CISO with cloud network security architecture strategy
• Responds to network issues related to SASE and cloud firewalls
• Acts as L3-L4 support for information security incidents
• Develops and maintains security architecture diagrams and documentation
• Supports the cloud security architect with network security related tasks
• Supports internal technology teams with deployment and upgrades of security stack
• Mentors and trains peers on network security related topics
• Partners with the network team for cross functional projects
• Partners with application support teams to implement security controls
• Partners with application development teams to implement network and internet controls
• Responds to on-call incidents for one 24-hour period per week and provide backup coverage 1 week every two months.

Qualifications

Required Qualifications

• Minimum 5+ years in information security focusing on network security tooling
• Deep cloud and network understanding in AWS and Azure clouds
• Security operations incident response experience
• Remain in stationary position for prolonged periods of time
• Operate computer programs and software
• Ability to communicate effectively with audiences in person and in electronic formats
• Day-to-day contact with others (co-workers and/or public)
• Ability to work in a collaborative business environment in close quarters with peers and varying interruptions.
• Remain in stationary position for prolonged periods of time
• Operate computer programs and software
• Ability to communicate effectively with audiences in person and in electronic formats
• Day-to-day contact with others (co-workers and/or public)
• Ability to work in a collaborative business environment in close quarters with peers and varying interruptions.

Preferred Qualifications

• Blend of networking, traditional firewall management, and other network security tooling experience.
• Technical lead experience in a large enterprise environment.
• Experience with zero-trust network architecture

Please note: This position does not offer sponsorship for employment visas. Applicants must be legally authorized to work in The United States without sponsorship now or in the future.

Compensation

Base Pay Range: $135,000 - $160,000

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary internal peers, prior performance, business sector, and geographic location.  In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary bonus programs, or other annual or non-annual incentive or sales plans.)

#LI-JD1

#LI-Hybrid

Disclosure

We are an Equal Opportunity/Affirmative Action Employer. We consider all qualified applicants for employment regardless of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other protected status