Senior Associate - Security Engineer

Location Designation: Hybrid - 3 days per quarter

As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting‑edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth — driving the company's success.

The Security Engineer will play a key role in designing, engineering, and maintaining NYL’s cloud and network security capabilities across hybrid environments. This role blends hands‑on engineering with solution architecture, ensuring that network and cloud controls are robust, scalable, and aligned with enterprise standards.

The engineer will support both on‑premises and cloud platforms—primarily AWS—integrating modern security solutions into NYL’s infrastructure and application ecosystems. The ideal candidate will bring technical depth across cloud networking, zero trust, and automation, with a strong learning mindset and enthusiasm for innovation. NYL is building the foundation for a secure, AI‑enabled, technology‑driven future—so curiosity, adaptability, and an eagerness to master emerging tools are essential.

• Engineer, configure, and maintain enterprise network and cloud security solutions.
• Design and implement cloud‑native network architectures in AWS using services such as VPC, Transit Gateway, Private Link, Network Firewall, WAF, and Guard Duty.
• Develop and manage segmentation strategies (e.g., Illumio, microsegmentation, Zero Trust principles) to prevent lateral movement and contain threats.
• Engineer and maintain secure connectivity solutions, including Zscaler, SWG, ZTNA, VPN, and enterprise firewalls (e.g., Palo Alto, Fortinet).
• Implement and tune cloud security posture management (CSPM), cloud workload protection (CWPP), and AWS Config Guardrails.
• Integrate network telemetry and cloud logs into enterprise SIEM and threat detection systems.
• Automate security control deployment using Infrastructure as Code (IaC) tools (e.g., Terraform, Cloud Formation).
• Collaborate with architecture and application teams to embed security into cloud and network design patterns.
• Support data protection objectives through encryption, tokenization, and secure network routing for sensitive data flows.
• Contribute to the development of Zero Trust architectures, secure edge connectivity, and hybrid network modernization initiatives.
• Stay informed about emerging threats, technologies, and AWS security capabilities; recommend improvements to evolve NYL’s security posture.

• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
• 5+ years of hands‑on experience in network or cloud security engineering roles.
• Proven ability to design, deploy, and operate secure hybrid network environments (on‑premises + AWS).
• Deep understanding of AWS security services (IAM, VPC, NACLs, Security Groups, WAF, Network Firewall, Guard Duty, Cloud Trail, KMS).
• Experience with secure connectivity platforms (Zscaler, SWG, ZTNA, VPN, firewalls) and segmentation technologies (Illumio, VLANs, SDN).
• Strong grasp of Zero Trust networking concepts, PKI, and modern security protocols (SPIFFE, DCR, PKCE).
• Experience automating security operations through scripting or infrastructure‑as‑code (Python, Power Shell, Terraform).
• Understanding of regulatory frameworks and compliance requirements (NYS DFS, NIST CSF, CIS, ISO 27001).

• Experience designing and implementing Zero Trust architectures at scale.
• Proficiency with AWS networking and security architecture design patterns, including Transit Gateway, Control Tower, and multi‑account segmentation.
• Familiarity with CSPM and CWPP platforms (e.g., Prisma Cloud, Wiz, Orca).
• Experience integrating security into CI/CD pipelines and Dev Sec Ops  workflows.
• Knowledge of encryption technologies, HSMs, and key management systems.
• Exposure to securing containers, serverless, and edge environments.
• Experience with AI‑assisted security tools or cloud‑based behavioral analytics.
• Relevant certifications: AWS…