Job Description

As a Senior Security Engineer, you will play a crucial role in safeguarding our firm's infrastructure. You will own the architecture and design of security platforms, lead complex implementations, and drive automation initiatives. Your influence will extend across engineering, architecture, and business units, ensuring alignment with our security strategy. This role offers the opportunity to mentor engineers and contribute to the continuous learning and innovation culture within our Information Security team.

• Architect and manage the lifecycle of Next-Gen Firewalls, Load Balancers, WAF, Remote Access, and other security solutions.
• Lead complex security implementations, configuration changes, and platform upgrades, ensuring high-quality technical oversight.
• Serve as the final technical escalation point, conducting root cause analysis for complex issues and building consensus for remediation.
• Provide technical leadership and mentorship to senior and mid-level engineers, acting as a technical lead on cross-functional initiatives.
• Define the technical roadmap for emerging technologies and represent Information Security in firm-wide architecture forums.
• Influence engineering, architecture, and business leaders to align technical roadmaps with security strategy and best practices.
• Set vendor strategy, conduct technical evaluations, and manage escalation relationships with strategic partners.
• Ensure compliance with regulatory frameworks and risk management practices in financial services.
• Drive observability and detection strategies using logging and SIEM solutions, enhancing our security posture.
• Collaborate with internal stakeholders, architecture teams, and third-party vendors to maintain a secure and resilient network environment.

• Bachelor's degree in Computer Science, Information Systems, or related field, with a minimum of 10+ years of hands-on experience in network security engineering and architecture.
• Expert-level certifications such as Palo Alto (PCNSE), Cisco (CCIE Security), Juniper (JNCIE), F5 (CTS/F5-CSE), or CISSP are strongly preferred.
• Demonstrated expertise in Palo Alto Firewalls (Panorama, PAN-OS), F5 (LTM/GTM/ASM), WAF technologies (Cloudflare preferred), and network security best practices.
• Advanced knowledge of network infrastructure, networking protocols, segmentation, zero-trust principles, and security architecture across hybrid environments.
• Experience in developing and implementing network security policies, standards, and reference architectures aligned with regulatory frameworks.
• Strong problem management and risk assessment skills, with the ability to make informed decisions and set corrective actions.
• Excellent communication skills to convey complex technical concepts to diverse audiences, including executives and engineers.
• Proficiency in cloud networking and security in AWS, GCP, or Azure, including Transit Gateway, VPN/Direct Connect, and Azure Virtual WAN.
• Experience with observability and detection strategies using logging and SIEM solutions, such as Splunk.
• Availability for senior technical escalation during critical incidents and after-hours work for high-risk implementations.