Hybrid Network Security Engineer

Posted 3 weeks ago

Apply now

About the role

  • Network Security Engineer responsible for securing, monitoring, and enhancing the enterprise network at Customers Bank. Focused on firewall administration and security policy enforcement in a hybrid environment.

Responsibilities

  • Secure, monitor, and enhance our enterprise network environment.
  • Focus on firewall administration, network segmentation, and security hardening.
  • Support the design and enforcement of security policies.
  • Maintain next‑generation firewalls and collaborate with Security and Infrastructure teams.
  • Configure, maintain, and troubleshoot next‑generation firewalls (especially Palo Alto Networks).
  • Lead efforts in network segmentation, micro‑segmentation, and Zero Trust architecture adoption.
  • Implement and maintain network security controls across wired, wireless, and cloud environments.
  • Monitor security logs, analyze firewall events, and respond to network security incidents.
  • Manage VPN technologies including remote access and site‑to‑site tunnels.
  • Support network architecture reviews and security assessments.
  • Ensure adherence to regulatory and security frameworks (SOX, FFIEC, PCI, HIPAA, etc.).
  • Maintain detailed documentation of firewall rulesets, segmentation maps, topology changes, and security configurations.
  • Work cross‑functionally with Information Security, Cloud, and Infrastructure teams.
  • Participate in IT change management processes and follow ITIL best practices.

Requirements

  • 3-5 years of experience in network security, network engineering, or related IT roles.
  • Strong understanding of network security concepts: segmentation, ACLs, IPS/IDS, threat prevention, SSL decryption, Zero Trust principles.
  • Hands-on experience with Palo Alto firewalls and Panorama; experience with Cisco firewalls is a plus.
  • Experience designing and implementing network segmentation (VLANs, VRFs, micro-segmentation).
  • Experience with VPN technologies and troubleshooting secure remote access solutions.
  • Experience with wireless security protocols and enterprise authentication (WPA2-E, 802.1X).
  • Experience with Cloud security concepts.
  • Solid knowledge of TCP/IP, DNS, DHCP, NAT, VPN, VLANs, OSPF, BGP.
  • Familiarity with network monitoring/logging tools (e.g., Splunk, Syslog).
  • Strong communication and documentation skills.
  • Relevant certifications are preferred such as Palo Alto PCCSA/PCNSA/PCNSE, Cisco CCNA Security, CompTIA Security+ or Network+.
  • Experience with Palo Alto firewalls, Panorama, and threat prevention tools.
  • Experience with Cisco networking including Cisco Identity Services Engine (ISE).
  • Exposure to cloud security/networking (Azure) is a plus.
  • Working knowledge of ITIL frameworks.

Benefits

  • Personal development plans
  • Equal opportunity employer
  • Reasonable accommodations upon request

Job title

Network Security Engineer

Job type

Experience level

Mid levelSenior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job