Senior Network Engineer - Network Security

As a Senior Network Engineer on the Network Security team, you will play a critical role in managing, securing, and modernizing the enterprise network security infrastructure for a large financial institution. Working alongside a team of highly skilled engineers, you will plan, implement, and support next-generation firewall platforms, network segmentation technologies, and security policy automation tools that protect Citizens' mission-critical resources and sensitive financial data.

In this position, you will leverage your deep technical expertise in network security engineering to drive operational excellence, support large-scale infrastructure projects, and ensure the stability and integrity of Citizens' network security posture., * Engineer, deploy, and maintain Palo Alto Networks next-generation firewalls across data center, cloud, and branch environments, including Panorama management, security policy configuration, NAT, SSL decryption, and firmware upgrades.

• Manage and support firewall policy automation and compliance tooling (e.g., AlgoSec), including automated rule implementation, policy optimization, and troubleshooting data validation errors.
• Support microsegmentation initiatives (e.g., Illumio) to enforce zero-trust network security principles across the enterprise.
• Evaluate the adequacy of firewalls, IDS/IPS, proxy gateways, and other network security devices; produce security recommendations and respond to security advisories and CVEs in a timely manner.
• Collaborate with Network Architecture, Cloud Networking, NOC, and IT operations teams to plan, develop, execute, and support infrastructure and network security-related projects.
• Provide Tier III technical support for network security incidents; assist with escalations to vendor TAC (e.g., Palo Alto Networks) and participate in the on-call rotation.
• Support disaster recovery exercises for Panorama and standalone firewall environments.
• Audit technical network security support tickets; document patterns, trends, and root cause analysis as they emerge.
• Contribute to operational documentation, SOPs, and knowledge transfer to enable NOC and junior engineers to support day-to-day security operations.

Do you have experience in VPN management?, Do you have a Bachelor's degree?, * 5+ years of working experience in network security engineering, network engineering, or a related field.

• Hands-on experience with Palo Alto Networks firewalls and Panorama (configuration, policy management, upgrades, troubleshooting).
• Experience with firewall policy management and automation tools (e.g., AlgoSec or equivalent).
• Strong understanding of network security principles: firewall architecture, segmentation, NAT, VPN, IDS/IPS, SSL/TLS decryption.
• Experience with incident response and escalation in a large enterprise or financial services environment.
• Proficiency with network monitoring and troubleshooting tools (e.g., Splunk, packet capture analysis, SNMP).
• Demonstrated ability to operate in a team environment; strong interpersonal and communication skills.
• Bachelor's degree in Computer Science, Computer Engineering, or related discipline (or equivalent experience)., * Palo Alto Networks certification (PCNSA, PCNSE, or PCNSC).
• Experience with microsegmentation platforms (e.g., Illumio).
• Experience with cloud security in AWS and/or Azure environments (security groups, cloud firewalls, transit gateway architectures).
• Familiarity with F5 load balancers, Netskope or proxy technologies, and Arista network platforms.
• Experience in the financial services industry; understanding of regulatory and compliance requirements (PCI DSS, SOX).
• Experience with ServiceNow for incident, change, and problem management workflows.
• CCNA, CCNP Security, or JNCIA certification.
• Experience supporting data center migration or decommission projects., * Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or related discipline (required).
• Palo Alto Networks PCNSE or PCNSC (preferred).
• Cisco CCNP Security or equivalent (preferred).

Pulled from the full job description

• Tuition reimbursement
• Parental leave
• Health insurance
• Retirement plan
• Paid time off
• Vision insurance
• Dental insurance, The salary range for this position is $114,000 - $152,000 per year plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the budget, work location, and relevant skills and experience.

We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens' paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance., We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more., Glassdoor Best Place to Work in Consulting, Finance & Insurance Human Rights Campaign Corporate Equality Index 100 Award Newsweek America's Most Charitable Company The Banker's US Bank of the Year Dave Thomas Foundation's Best Adoption-Friendly Workplace Disability:IN Best Places to Work for Disability Inclusion