Senior Network Security Engineer

The Opportunity:

The Senior Network Security Engineer works in the office and leads efforts involving the design, implementation, and maintenance of secure network solutions required to protect the integrity and confidentiality of our organization's data. We are looking for a strong technical background in networking and security technologies, a proactive approach to threat detection and mitigation, and a passion for staying ahead of the evolving cybersecurity landscape.

• Design, configure, and manage security tools such as Layer 7 firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), web application firewalls (WAF), proxies, and endpoint protection systems
• Lead efforts to implement secure access controls, identity management solutions, and segmentation policies
• Lead efforts in developing, enforcing, and reviewing information security policies and procedures
• Monitor network traffic for unusual activity using SIEM tools and respond to security alerts and incidents
• Conduct vulnerability assessments and coordinate remediation efforts across relevant platforms
• Help deploy network hardware and software with a security-first approach
• Stay current on emerging threats, vulnerabilities, and industry trends; recommend improvements to enhance the organization's security posture
• Lead work efforts with cross-functional teams to support secure application and system deployment
• Maintain documentation of network and security configurations, procedures, and incident reports

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience)
• 7+ years' experience in a network security role within an enterprise environment
• Next-Gen firewall design and architecture, reviewing/implementing application access requests, troubleshooting technical issues with application availability and performance, periodic review and audit of policies to ensure infrastructure is compliant with standard
• Experience with IP routing/switching concepts
• Advanced knowledge in troubleshooting TCP/IP protocol including PCAP analysis
• Strong experience with network zoning concepts including ZTNA/micro-segmentation models
• Experience with deploying policy and supporting VPN remote access solutions
• Foundational knowledge in PKI and associated protocols (SSL/TLS)
• Able to analyze risk associated with onboarding new applications/technology

• $130,000 - $180,000 base salary per year in the state of WA. New hires should expect to start at the lower end of the range depending on experience
• Eligible for a discretionary bonus based on firm and individual performance

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
• This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER