Sr. Network Security Engineer

About the role

This position is not eligible for employment visa sponsorship now or in the future. This role will be onsite and available at any of the posted locations to include: San Diego, CA, Irvine, CA, Los Angeles, CA, Centennial, CO, Las Vegas, NV. Remote is not available.

Responsibilities

• Own the day-to-day engineering, configuration, and optimization of ZTNA and microsegmentation across environments.
• Design and implement microsegmentation policies that enforce least-privilege network access across data center, cloud, and hybrid workloads.
• Drive enterprise-wide ZTNA adoption, partnering with infrastructure, application, and DevOps teams to onboard users and services.
• Build and maintain segmentation maps, traffic flow baselines, and policy rule sets aligned to business-critical applications and regulatory boundaries.
• Support and troubleshoot network access issues related to ZTNA policy enforcement, split tunneling, and identity-aware access controls.
• Learn to design, build, and manage AI agents (using platforms such as Kindo.ai, n8n, and Claude/Anthropic APIs) that automate routine network security operations including policy reviews, firewall rule audits, segmentation gap analysis, and anomaly triage.
• Build AI-assisted runbooks that enable autonomous or semi-autonomous handling of common network security events, escalating only when human judgment is required.
• Instrument and monitor AI agent performance, accuracy, and safety using human feedback loops and governance frameworks established by the CISO organization.
• Contribute to the team’s AI Governance practices, including prompt version control, agent testing, and compliance with the Axos AI Governance Management Directive.
• Participate in incident response for network-layer events, providing technical expertise during investigation and containment.
• Document architectures, standard operating procedures, and AI agent configurations to a standard that enables knowledge transfer and auditability.
• Stay current on emerging Zero Trust frameworks, AI/ML developments, and network security threats relevant to a federally regulated financial institution.

Requirements

• 7+ years of progressive experience in network security engineering, with hands-on work in firewall management, network segmentation, VPN/ZTNA, and intrusion detection/prevention.
• Demonstrated experience with micro segmentation platforms and ZTNA.
• Strong working knowledge of TCP/IP, DNS, routing/switching, proxy architectures, and cloud networking.
• Familiarity or strong willingness to learn AI/ML concepts, prompt engineering, and agentic automation frameworks.
• Excellent communication skills with the ability to translate complex technical concepts for both technical and executive audiences.
• Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).
• PREFERRED: Experience in financial services, banking, or other heavily regulated environments (FFIEC, SOX, PCI-DSS).
• Hands-on experience building or managing AI agents, LLM-based workflows, or security automation pipelines.
• Industry certifications such as CCNP Security, CISSP, or equivalent.

Skills

• Deep expertise in network security architecture.
• Strong understanding of AI/ML concepts and automation frameworks.
• Ability to communicate complex technical concepts effectively.

Benefits

Axos Employee Benefits May Include:

• Medical, Dental, Vision, and Life Insurance
• Paid Sick Leave, 3 weeks’ Vacation, and Holidays (about 11 a year)
• HSA or FSA account and other voluntary benefits
• 401(k) Retirement Saving Plan with Employer Match Program and 529 Savings Plan
• Employee Mortgage Loan Program and free access to an Axos Bank Account with Self-Directed Trading

Pay

$150,000.00 /Yr. - $180,000.00 /Yr. Actual starting pay will vary based on factors including, but not limited to, geographic location, experience, skills, specialty, and education.

Schedule

Onsite positions available at various locations including: San Diego, CA, Irvine, CA, Los Angeles, CA, Centennial, CO, Las Vegas, NV.