Lead Information Security Engineer

About the role

We are seeking a Lead Firewall Automation and Certification Engineer to join our FirewallDEV team within the Application Hosting – Secure Network Services organization. This technical leader will design, automate, and maintain secure network infrastructure across data centers, enabling secure connectivity to business partners, the public Internet, and cloud providers. The role drives automation, improves transparency, and enhances operational efficiency as part of our transformation efforts.

Responsibilities

• Conduct rigorous testing and certification of next‑generation firewalls (NGFWs) to validate performance, security efficacy, compliance with industry standards, and interoperability across diverse network environments.
• Design and implement scalable, secure NGFW architectures across enterprise environments.
• Lead cross‑functional teams in planning and delivering firewall‑related projects using Agile methodologies.
• Develop automation solutions for firewall provisioning, policy management, and operational tasks using Python, Ansible, and other tools.
• Perform complex firewall certifications, upgrade testing, and develop templated configurations.
• Ensure compliance with security and regulatory requirements in all firewall implementations.
• Analyze performance trends and recommend improvements to firewall operations and automation.
• Collaborate with network and cyber partner teams to educate and drive successful outcomes.
• Mentor junior engineers and contribute to technical design documentation.

Required Qualifications

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 3+ years of hands‑on experience with NGFW platforms.
• 3+ years of automation experience.
• 3+ years of experience with firewall policy design, NAT, VPNs, threat‑prevention features, and templated installations.
• 3+ years of experience with Python, Ansible, REST APIs, and automation frameworks.

Desired Qualifications

• Experience with testing and certification of NGFWs against standards such as ICSA Labs and NSS Labs.
• Strong networking knowledge: TCP/IP, routing, switching, VPNs, and protocols (HTTP, DNS, SSL/TLS).
• Familiarity with performance, functional, interoperability, and security testing methodologies.
• Relevant certifications (e.g., CISSP, CEH, GSEC, Palo Alto Networks PCNSE, Fortinet NSE, Cisco CCNP Security).
• Hands‑on experience with test tools such as Ixia, Wireshark, Nmap, and vulnerability scanners.
• Proficiency with automation tools like Ansible Tower, Terraform, OCP, and Git.
• Experience with Agile methodology and CI/CD pipelines (Jenkins, GitLab).
• Knowledge of network security best practices and compliance frameworks.
• Experience in large enterprise environments with complex firewall deployments.
• Excellent verbal, written, and interpersonal communication skills.
• Ability to produce clear, detailed test plans, procedures, and certification reports.

Eligibility

This role is not eligible for visa sponsorship.

Pay

Base pay range: $119,000.00 – $187,000.00. Employees may also be eligible for incentive opportunities.

Benefits

• Health benefits
• 401(k) plan
• Paid time off
• Disability benefits
• Life, critical illness, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings programs
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement