Senior Network Security Engineer

About the role

NorthMark Compute & Cloud (NMC²) operates at the bleeding edge of technology, scaling and enhancing high‑performance computing (HPC) and cloud infrastructure for clients’ research, production, and delivery. The Network Security Engineer is a hands‑on technical role within NMC²’s centralized Security Engineering organization, responsible for designing and maintaining the network security infrastructure that protects the hyperscale HPC and cloud compute environment. The role contributes to the design, development, and delivery of critical network security components, applies strong technical depth in network security architecture, and serves as a subject‑matter expert and mentor.

Responsibilities

• Contribute to the design, implementation, and delivery of scalable network security architecture and controls including firewalls, IDS/IPS, and VPNs across on‑premises and cloud environments.
• Serve as the team’s primary subject‑matter expert for network security technologies, providing guidance and technical direction on complex security challenges.
• Apply technical depth and sound judgment to resolve complex network security challenges, balancing security requirements with operational and delivery needs.
• Collaborate with cross‑functional peers across infrastructure, cloud, and IT operations, communicating technical decisions and progress clearly.
• Develop and maintain network security standards, policies, and technical documentation.
• Support network segmentation and micro‑segmentation efforts by providing expertise on traffic flows, access controls, and policy enforcement.
• Participate in security architecture reviews for new projects, systems, and third‑party integrations to ensure network security requirements are addressed.
• Mentor junior security engineers and contribute to the growth and development of the network security team.

Requirements

• 7+ years of experience in network security engineering, with hands‑on experience across trusted, untrusted, and DMZ environments.
• Strong understanding of network protocols and the OSI model, with practical experience in TCP/UDP‑based applications, routing, switching, and load balancing.
• Experience securing both on‑premises and cloud network environments (AWS, Azure, or GCP).
• Experience designing and securing network environments across both on‑premises and cloud platforms.
• Proven ability to identify and deliver process improvements, automation opportunities, and tool enhancements within a security engineering function.
• Experience with security monitoring tools and SIEM platforms, with the ability to investigate and respond to network‑based threats.
• Strong understanding of security frameworks and hardening standards such as NIST, CIS Benchmarks, or ISO 27001.
• Effective communicator able to articulate technical decisions and trade‑offs to both technical peers and leadership.
• Relevant certifications preferred (e.g., CCNP Security, PCNSE, CISSP, or equivalent).
• Experience with VxLAN EVPN data‑center architecture.
• Background in SOC operations or working with MSSPs.
• Firewall automation experience.

Benefits

• Company‑paid lunch stipend (provided via GrubHub).
• 100% employer‑paid medical coverage in a High Deductible Health Plan, plus dental and vision benefits for employees and families.
• 16 weeks of paid parental leave.
• Employee Assistance Program, life insurance, short‑term and long‑term disability.
• 401(k) with company match of 100% of contributions up to 6%.
• Optional employee‑paid benefits: PPO medical plan, Health Savings Accounts with company contribution, Flexible Spending Accounts, supplemental life insurance, Wellhub, and more.
• 25 days of paid time off plus 12 company holidays.

Must be legally authorized to work in the United States without employer sponsorship, now or at any time in the future.