VP, Network Engineering

Lead with Purpose, Unlock Your Team’s Passion At LPL, people leaders hold the key to the employee experience — shaping culture, driving performance, and guiding individuals to new heights. Because when that happens, we all win — clients, LPL, and most importantly our employees.

If you're ready to lead with intention and discover what’s possible, LPL Financial invites you to apply today.

Network engineers at LPL shape the literal ground beneath every workload — and at our scale, that ground moves fast. We're modernizing a multi‑account AWS network into the foundation of an AWS-first Cloud Center of Excellence, turning every change into code, and partnering deeply with Security & Governance to make compliance a property of the platform. If you want to operate AWS networking at the depth of a Tier 1 financial firm — and stay hands‑on in BGP, Terraform, and incident command while leading a globally distributed team across the US and India — this is your seat.

As the VP, Network Engineering, you lead the Network Engineering pod within the Foundations team in LPL's Cloud Center of Excellence (CCOE). You own the architecture, implementation, and operations of LPL's AWS network fabric across our multi‑account landing zone, plus the hybrid connectivity and edge services that link cloud to on‑premises. Network Engineering at LPL is tightly integrated with Security & Governance — a peer pod inside the same Foundations team — and a substantial portion of your team's work is the design, automation, and continuous hardening of network‑layer security and compliance controls in deep partnership with the VP, Security & Governance.

You also partner closely with LPL's separate enterprise Information Security organization, which acts as the watchdog for security risk and regulatory compliance. LPL is an AWS‑first CCOE: a multi‑account landing zone with 100+ private reusable Terraform modules that enable 60+ AWS services, all delivered through Terraform Cloud and Git Hub Actions. You are both a people leader for a globally distributed team across the US and LPL's India GCC and a hands‑on senior network engineer who contributes directly to network designs, Terraform code, and incident response.

• Lead the Network Engineering pod within the Foundations team in CCOE: own AWS network architecture, implementation, and operations across LPL's multi‑account landing zone
• Design, build, and operate Transit Gateway, VPCs, Private Link and private endpoints, hybrid connectivity over Direct Connect and Site‑to‑Site VPN with BGP‑driven routing, edge services, network firewalls (AWS Network Firewall, Palo Alto, etc.), DNS (Route 53, Infoblox), and certificate management (ACM, ACM PCA)
• Partner deeply and continuously with the VP, Security & Governance to design, automate, and enforce network‑layer security controls: segmentation and micro‑segmentation, encryption in transit, ingress/egress inspection, WAF, Shield, Guard Duty, and network‑detective controls
• Co‑own and continuously harden the multi‑account landing zone in partnership with the Security & Governance, Fin Ops, Monitoring, and Functional Design Engineering & Strategy pods (within Foundations) and the Platforms and Containers teams — delivering a secure‑by‑default network fabric
• Translate regulatory requirements (FINRA, SEC, PCI, SOX) into network and connectivity controls; partner with Security & Governance, the enterprise Information Security organization, and Internal Audit on evidence collection, attestation, and audit response
• Build and maintain the Terraform code that defines LPL's foundational network layer — VPCs, Transit Gateway, route tables, security groups, network firewalls, Private Link, DNS, and edge services — deployed through Account Factory for Terraform (AFT) at the foundational base layer, distinct from the private module library that application teams consume for self‑service
• Drive the network strategy for new patterns: zero trust, Private Link, private endpoints, IPv6, and service‑mesh integration
• Embed agentic AI capabilities into the team's engineering practice (e.g., Cursor, Claude Code, Bedrock, MCP servers, agentic IaC and…