Lead Network Security Engineer

Position Overview

The Lead Network Security Architect is responsible for defining and advancing the organization’s network security architecture and strategy. This role provides technical leadership in designing secure network environments, translating cybersecurity principles into practical implementations, and guiding engineering teams that operate security platforms.

The architect develops security frameworks, reference architectures, and policy models that protect enterprise systems and data. While possessing deep technical knowledge of platforms such as Palo Alto Networks firewalls, the role focuses on designing secure solutions and mentoring engineers who implement those designs.

This position serves as a senior technical leader, partnering with infrastructure, cloud, and security teams to ensure the organization’s network architecture aligns with modern cybersecurity practices and business objectives.

This position is a hybrid Monday-Friday with in-office attendance expected Tuesday through Thursday. Team members are expected to be flexible with their schedule to support up to two after-hours planned maintenance windows per week.

The Lead Network Security Engineer will work in a large infrastructure team and be required to support specific duties, including, but not limited to:

• Design and maintain the organization’s network security architecture
• Design security control frameworks for network segmentation, access control, and traffic inspection
• Develop reference architectures for secure connectivity across data center, cloud, and remote environments
• Translate cybersecurity best practices and threat intelligence into practical network security controls
• Align network security architecture with Zero Trust and least-privilege principles

• Design secure routing and segmentation strategies across enterprise networks
• Establish standards for firewall policy architecture, NAT strategy, and traffic classification
• Define secure connectivity patterns for internal services, partner integrations, and internet access
• Guide architecture decisions related to VPNs, remote access, and identity-aware networking
• Ensure resiliency and secure design across critical infrastructure

• Provide architectural guidance for platforms such as:
  • Palo Alto Networks firewalls and Panorama
  • VPN and secure remote access solutions
  • Network segmentation and microsegmentation
  • SASE and cloud network security services
• Develop architectural standards for how security controls are implemented across these platforms
• Evaluate new security technologies and recommend improvements

• Mentor network and security engineers in applying security architecture principles
• Provide design guidance for complex implementations and major infrastructure changes
• Review security designs and firewall policy changes for alignment with architectural standards
• Guide contractors and junior engineers responsible for day-to-day platform operations

• Collaborate with cybersecurity to translate risk management objectives into network security controls
• Support incident response by helping identify architectural improvements to prevent future threats
• Contribute to security audits, compliance initiatives, and risk assessments
• Establish and maintain security architecture documentation and standards

• Provide architectural oversight for major upgrades and platform lifecycle changes
• Guide certificate management strategy, encryption standards, and authentication methods
• Support troubleshooting of complex security issues across network platforms
• Ensure operational teams follow architecture and policy standards

• 7+ years of network security or cybersecurity experience
• Strong foundation in cybersecurity principles including:
  • Network segmentation
  • Zero Trust architecture
  • Identity‑aware access control
  • Secure network design
• Deep understanding of enterprise firewall platforms
• Experience designing and maintaining IPSec and remote access VPN architecture
• Strong understanding of routing…