Senior Engineer, Network Security / Engineer II (US)

Work Location: Mount Laurel, New Jersey, United States of America. Additional work locations may include Fort Lauderdale, FL or Charlotte, NC.

About the role

The Senior Engineer, Network Security role is responsible for the engineering and design of TD's cloud SaaS Secure Web Gateway (SWG) and Secure Access Service Edge (SASE) infrastructure. The successful candidate will be highly versed in managing large-scale enterprise deployments of Data Loss Prevention (DLP), Borderless WAN VPN functions, and related network security experience for cohesive network access security. This is a hands-on senior engineering role with platform-level accountability across the Netskope stack, sitting at the intersection of network security, data protection, and enterprise connectivity in a heavily regulated GSiB financial services environment.

Responsibilities

• Provide engineering and delivery support for Netskope SSE products across CASB, SWG, ZTNA, DLP, Private Access, and BWAN technologies.
• Architect and deliver traffic steering and traffic engineering solutions at scale across IPsec, GRE tunnel termination, as well as implementing effective failover strategies utilizing SDWAN endpoints and transit connectivity.
• Assist in coordinated maintenance, platform optimization, and line-of-business-specific tuning for performant traffic routing.
• Understand a multi-WAN carrier topology, including MPLS, Direct Internet Access (DIA), and private MAN connectivity configurations as transit for steering.
• Demonstrate proficiency in SDWAN topologies (Cisco Catalyst SDWAN/Viptela, Aruba EdgeConnect, Silverpeak) used as terminating agents/steering control points for branch site traffic origination.
• Partner and collaborate on the design and functionality of security platforms with Global Security Defence (GSD) across Identity & Access Management and DLP design considerations to serve the enterprise.
• Design and implement traffic steering using private line services (dark fiber, carrier interconnects, point-to-point circuits) using BGP.
• Provide escalation support to the Network Operations organization for advanced troubleshooting of traffic routing, policy, user, or system access issues in applications and systems.
• Act as a key contributor in a complex and critical environment, providing leadership to teams or projects and sharing expertise.

Requirements

• Undergraduate degree or Technical Certificate; Graduate degree preferred.
• 7+ years of relevant experience.

Skills

• Expert knowledge of network security technologies, with hands-on experience in production deployments, operations, and build teams.
• Deep understanding of Netskope steering architecture, real-time policy enforcement, the NewEdge network, and data plane/tunnel design.
• Operational maturity in incident response workflow design, triage, and policy tuning.
• Strong foundation in Layer 2/Layer 3 network frameworks and TCP/IP networking, including OSPF and BGP routing protocols.
• Experience with QoS configuration on routers and switches in enterprise environments.
• Knowledge of WAN/LAN network architecture and operations in the enterprise (Firewalls, Routers, Switches) as it relates to SaaS interoperability.
• Demonstrated skills in physical network tasks and advanced troubleshooting.
• Interest in enhancing expertise and staying current with emerging industry trends, new technologies, and best practices.
• Experience working independently and autonomously as a lead on diverse, highly complex, and multi-faceted assignments.
• Strength as a key resource in technical knowledge transfer between project teams, the business, and/or outside vendors.
• Experience operating in a financial services role, supporting branch, campus, datacenter, and colocation topologies.
• Relevant Netskope experience and/or certifications (e.g., NCCSA/NCCSP) or equivalent.
• Broader SASE/SSE ecosystem exposure and comparative understanding of adjacent vendors (Zscaler, Palo Alto Prisma Access).
• Experience with SIEM workflows as it relates to security automation and infrastructure-as-code approaches to policy and configuration management.
• Prior experience migrating from legacy proxy or on-premise web security architectures to cloud-delivered SASE models.
• Desire to pursue network automation and support infrastructure-as-code (IaC) efforts utilizing Ansible, Terraform, or Python.
• Proficiency in at least one scripting language such as Python or shell scripting.
• Proficiency with network automation using orchestration platforms, scripting, and REST APIs.
• Outstanding communication skills, with the ability to communicate intricate technical and procedural matters to both technical and non-technical team members.
• Experience with network implementation using SDN technologies and frameworks.
• Technical certification in technology of expertise (e.g., CCNA, CCNP, CCIE, or related).

Physical Requirements

• Domestic Travel: Occasional (1-33%)
• International Travel: Never (0%)
• Performing sedentary work: Continuous (67-100%)
• Performing multiple tasks: Continuous (67-100%)
• Operating standard office equipment: Continuous (67-100%)
• Responding quickly to sounds: Occasional (1-33%)
• Sitting: Continuous (67-100%)
• Standing: Occasional (1-33%)
• Walking: Occasional (1-33%)
• Moving safely in confined spaces: Occasional (1-33%)
• Lifting/Carrying (under 25 lbs.): Occasional (1-33%)
• Lifting/Carrying (over 25 lbs.): Never (0%)
• Squatting: Occasional (1-33%)
• Bending: Occasional (1-33%)
• Kneeling: Never (0%)
• Crawling: Never (0%)
• Climbing: Never (0%)
• Reaching overhead: Never (0%)
• Reaching forward: Occasional (1-33%)
• Pushing: Never (0%)
• Pulling: Never (0%)
• Twisting: Never (0%)
• Concentrating for long periods of time: Continuous (67-100%)
• Applying common sense to deal with problems involving standardized situations: Continuous (67-100%)
• Reading, writing, and comprehending instructions: Continuous (67-100%)
• Adding, subtracting, multiplying, and dividing: Continuous (67-100%)

Pay

$98,160 - $159,270 USD. TD is committed to providing fair and equitable compensation opportunities to all colleagues. The base pay offered may vary based on skills, experience, job-related knowledge, geographic location, and other specific business and organizational needs.

Benefits

TD offers a Total Rewards package that includes:

• Base salary and variable compensation/incentive awards (e.g., eligibility for cash and/or equity incentive awards).
• Health and well-being benefits.
• Savings and retirement programs.
• Paid time off (including Vacation PTO, Flex PTO, and Holiday PTO).
• Banking benefits and discounts.
• Career development and reward and recognition programs.

Regular development conversations, training programs, and a competitive benefits plan are provided to support colleagues in thriving both at work and at home.