Network Security - Sr. Engineer/Lead

Key Responsibilities

Design, implement and operate the network and connectivity layer of the enterprise cloud platform, including hub-and-spoke/Azure Virtual WAN topologies and hybrid connectivity to on-premises and member-firm networks.

Configure and manage edge routing, BGP peering and DNS architecture across cloud and on-premises environments. Implement and manage centralized firewall and traffic inspection, including firewall policies, NSG patterns and routing intent aligned to approved security baselines.

Integrate network and firewall telemetry with monitoring and SIEM tooling, and support firewall platform migrations (e.g. Panorama to Strata Cloud Manager).

Monitor network health and performance, respond to incidents and escalations, and support disaster recovery planning and testing.

Maintain network documentation and runbooks covering onboarding, troubleshooting, DR recovery and escalation.

Deploy and maintain network infrastructure through approved Infrastructure-as-Code, and partner with Cloud/Platform Architects, Security and DevOps teams to align network design with platform requirements. Support onboarding of new regions, hubs and connectivity requirements as the platform scales.

Requirements

5+ years of overall experience, including 3+ years designing and operating enterprise network infrastructure.

Hands-on experience with Azure networking: Virtual WAN, VNets, routing, private endpoints, ExpressRoute/VPN.

Experience with next-generation firewalls (Palo Alto preferred), including policy design, traffic inspection and SD-WAN integration.

Strong understanding of routing protocols (BGP), DNS (public/private/hybrid resolution) and network segmentation.

Experience with SD-WAN technologies and edge router configuration.

Familiarity with Infrastructure-as-Code for network deployment (Terraform or equivalent).

Experience monitoring network health and troubleshooting connectivity/performance issues in a hybrid cloud environment.

Bachelors degree in Computer Science, Engineering or a related field (or equivalent experience).

Good to Have

Palo Alto or Cisco certifications (PCNSE, CCNP, CCIE).Azure networking certification (AZ-700).

Experience with Strata Cloud Manager or Panorama.Exposure to multi-region or multi-cloud network design (including GCP networking).

Experience in regulated or large enterprise environments.