Principal Network Security Engineer

** At Elanco (NYSE: ELAN) – it all starts with animals!
**** At Elanco, we pride ourselves on fostering a diverse and inclusive work environment. We believe that diversity is the driving force behind innovation, creativity, and overall business success. Here, you’ll be part of a company that values and champions new ways of thinking, work with dynamic individuals, and acquire new skills and experiences that will propel your career to new heights.
**** Making animals’ lives better makes life better – join our team today!
** We are seeking a Principal Network Security Engineer to assist us in designing and implementing firewall and network access control (NAC) technology solutions across IT and OT networks. The Principal Network Security Engineer will contribute to delivering various technical products in collaboration with other engineers, architects, and operational support teams.  The Principal Network Security Engineer will be part of the team responsible for developing and supporting Elanco’s Network Security Platform.

The team collaborates closely with technical service owners, architects, and the operations team to continuously raise the reliability bar for our services while guiding the adoption of Elanco’s network and security platform. The team provides direction for implementing modern technologies and a zero-trust strategy throughout all stages of the service development life cycle.
** Your Responsibilities
*** Work with the Network Architect to design, develop and maintain the enterprise security architecture.
* Ensure that all projects have an Operations hand over plan, including creating and maintaining appropriate documentation and knowledge articles to ensure our solutions are easily understood and well recorded, in accordance with regulatory standards.
* Oversee firewall and NAC security projects within the organization.
* Be the ultimate escalation point for issues in Operations.
* Help provide technical direction, consultancy, and mentorship to junior engineers, the network security team, and infrastructure operations teams.
* Focus on the creation and execution of medium to high complexity firewall tasks.
* Drive medium to high complexity NAC engineering projects.
* Work with Info Sec and Tech Ops teams to improve the execution of network security design reviews by the operational team.
* Interact with Operations support teams as part of the technology lifecycle and report back on operational challenges.
* Provide business IT consultancy to ensure services are secured by design.
* Deliver network security engineering projects per agreed policies, processes, and procedures.
* Ongoing policy review and adjustment to maintain and develop our security posture.
* Proactively research emerging technologies, approaches, and the overall threat landscape to enhance Elanco’s network security posture.
* Set and ensure the delivered solution meets technical, architectural, and application principles and complies with our IT Security, Privacy, and Quality needs.
* Actively building and staying abreast of emerging technologies, guiding teams on how to interpret and best leverage the emerging technologies.
* Engaging in the community (internally and externally) across multiple channels, looking to share, educate, and inspire.
** What you need to Succeed (minimum qualifications)
*** At least 5 years’ experience in network security engineering and design, including hands-on experience with next-generation firewalls, which must include Palo Alto Networks.
* Experience in designing, building, and documenting technical solutions.
* Experience with implementing and maturing network security controls and procedures.
* Experience with routing protocols (OSPF), Cisco switching, Palo Alto Global Protect VPN.
* Experience maintaining Palo Alto Panorama, Logger, licensing, and other Palo Alto Cloud solutions.
* Understanding of the principles of a Network Access Control system.
* Familiar with Zero Trust Network and Zero Trust Edge adoption.
* Understanding of modern security architectures, e.g., micro-segmentation, application identity, and distributed firewalls.
* Strong communication skills with multiple examples of being…