Network Security Engineer

In this critical role you will work with a dedicated team of professionals to design, engineer, and support firewalls, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and routed and switched networks. You will support advanced problem analysis and isolate highly complex issues, develop effective working relationships with technology and business stakeholders, and maximize network performance and security through ongoing monitoring, troubleshooting, and continuous improvement. This role also includes helping define and maintain secure, repeatable infrastructure through automation and Infrastructure as Code practices, while providing technical leadership and coaching to other members of the team. This role will participate in an on-call rotation and on-site work is required.

• Strong network security engineering background with emphasis on cloud-delivered security and zero-trust access

• Palo Alto NGFW, Palo Alto Panorama, Palo Alto Expedition

• Zscaler ZIA/ZPA design, administration, troubleshooting, and policy management

• VPN, NAT, Subinterfaces, LACP, DHCP relay, Virtual routers, PBF

• Infrastructure as Code and automation using tools such as Ansible, Terraform, or similar frameworks for secure, repeatable network and security deployments

• F5 Load balancers/Application Delivery

• Nexus NXOSVPC, LACP, L2/3 VLANs, OSPF, VRF, HSRP, PBR

• Campus switchingL2 VLANs, DHCP snooping, DAI, RSTP, RadiusRoutingASR IOS-XE, ISR, EIGRP, OSPF, VRF, PBR, Subinterfaces, VLANsMerakiVPN, SDWAN, MX (firewalls), MS, MR, Wireless, You should have Bachelor’s degree in Computer Science, or related areas, a minimum of 7+ years of experience, and hands-on technical knowledge of networking and security. Arista, Cisco, Palo Alto, and Zscaler certificationsare all preferred. You should bring advanced knowledge of internet protocols such as HTTP(S), TCP/IP, DNS, SSL, DHCP, BGP, OSPF, MPLS, wireless (802.11*), network routing, firewalls, secure access, and switching. Solid proficiency with, Palo Alto, Zscaler, Infoblox, ExtraHop, Splunk, Meraki, Netdisco, and F5 Network is expected. A strong understanding of system management and automation tools such as Ansible, Terraform, Arista CloudVisionis highly desirable, along with experience applying Infrastructure as Code practices to network and security environments. Nice to have knowledge in Windows Server and Linux operating systems. Customer service focused, excellent communication skills, and the ability to work in a team-oriented environment are important

At L.L.Bean, we believe the outdoors brings out the best in all of us. We are committed to fostering a culture of belonging and creating safe, inclusive spaces where everyone feels welcome-both here and Outside. We value individual differences and are dedicated to maintaining an inclusive work environment where everyone can bring the best of their experience and talents and truly thrive.

We welcome the opportunity for this role to be hybrid based at the corporate headquarters in Freeport, Maine., If you care about the outdoors, joining L.L.Bean is a great way to feel good about what you do. Our benefits package makes a good thing even better, with programs and perks designed to support your health and financial goals. Plus, maintaining a healthy work-life balance and re-charging outside are all part of the plan.

If your experience looks a little different from what we’ve identified and you think you’d be great at this role, we’d love to learn more about you! At L.L.Bean, we believe the outdoors brings out the best in all of us. We strive to reflect this every day in our commitments to employees and partners and in our efforts to promote belonging.