[Remote] IT Security Senior Engineer

Note: The job is a remote job and is open to candidates in USA. DFIN is hiring a Senior Network Security Engineer to provide technical leadership for enterprise network security across cloud and on-premises environments. The role leads complex security designs and implementations, escalates major incidents, and advances modernization aligned with the company’s Zero Trust strategy.

Responsibilities

• Lead the design of secure architectures for LAN/WAN, hybrid cloud, and SaaS environments; define reference patterns
• Own medium-to-large initiatives (e.g., segmentation, SASE expansions, firewall modernization) from design through delivery
• Contribute to multi-year roadmaps by identifying gaps, reducing technical debt, and aligning to Zero Trust outcomes
• Engineer and optimize advanced firewall/WAF capabilities, DDoS protections, API security patterns, and load balancing controls
• Design Azure connectivity and security controls at scale (hub/spoke, shared services, private connectivity, routing strategy)
• Implement and operationalize microsegmentation strategies and integrate with identity and endpoint signals
• Lead integrations with telemetry and NDR tools to improve detection fidelity and end-to-end visibility
• Act as Level 3 escalation for high-severity incidents; coordinate technical response and ensure timely mitigation
• Lead root-cause analysis, author post-incident reports, and drive systemic fixes and resilience improvements
• Establish and improve runbooks, operational metrics, and reliability practices for owned platforms; guide on-call readiness
• Define automation standards for network/security workflows; build reusable modules and guardrails for safe changes
• Partner with platform engineering to embed secure connectivity controls into CI/CD and infrastructure-as-code pipelines
• Mentor engineers in architecture, troubleshooting, and secure design; provide technical reviews and guidance
• Influence stakeholders by presenting options, risks, and recommendations; partner with vendors to resolve complex issues

Skills

• 7-10+ years of hands-on experience in network security engineering, including cloud networking and enterprise platforms
• Cloud networking/security certifications (Azure preferred; AWS/Google Cloud Platform a plus)
• Ability to communicate complex architecture and risk decisions to both technical and business stakeholders
• Demonstrated leadership through mentorship, technical reviews, and influence across teams
• High ownership, judgment, and ability to prioritize under pressure
• Bachelor's degree in Computer Science, IT, or related field (preferred)
• Equivalent experience
• CCNP/CCIE (Security or Enterprise) or equivalent experience
• SASE/SD-WAN certifications (e.g., Zscaler) are a plus
• Deep expertise in firewall/WAF policy architecture, routing, segmentation, and cloud networking controls
• Proven ability to lead complex troubleshooting and incident response for high-impact events
• Strong understanding of Zero Trust, defense-in-depth, and secure-by-design principles
• Experience designing operationally sustainable solutions (documentation, runbooks, lifecycle management, monitoring)

Benefits

• A flexible workplace
• Opportunities for professional growth

Company Overview

Company H1B Sponsorship