> Markdown version of [/jobs/ext/284452-sr-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/284452-sr-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Network Security Engineer - **Company:** Axos Bank - **Location:** San Diego, CA, United States - **Experience:** Expert - **Salary:** $120,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Access Network, Application Programming Interfaces (APIs), Artificial Intelligence, Cloud Computing, Cyber Security, Data Centers, DevOps, Domain Name System (DNS), Intrusion Detection and Prevention, Virtual Private Networks (VPN), Network Security, Machine Learning, Routing, Network Segmentation, PCI Data Security Standards, Zero Trust Network Access, TCP/IP, Large Language Models, Prompt Engineering, Information Technology, Virtual Agents, Software Version Control, Security Orchestration, Automation & Response - **Published:** May 15, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a393f54958547776 ## About the Role Do you have experience in VPN management?, Do you have a Bachelor's degree?, * 5+ years of progressive experience in network security engineering, with hands-on work in firewall management, network segmentation, VPN/ZTNA, and intrusion detection/prevention. * Demonstrated experience with micro segmentation platforms and ZTNA. * Strong working knowledge of TCP/IP, DNS, routing/switching, proxy architectures, and cloud networking. * Familiarity or strong willingness to learn AI/ML concepts, prompt engineering, and agentic automation frameworks. * Excellent communication skills with the ability to translate complex technical concepts for both technical and executive audiences. * Bachelor's degree in computer science, Information Security, or related field (or equivalent experience). Preferred: * Experience in financial services, banking, or other heavily regulated environments (FFIEC, SOX, PCI-DSS). * Hands-on experience building or managing AI agents, LLM-based workflows, or security automation pipelines. * Industry certifications such as CCNP Security, CISSP, or equivalent., IER Right to Work Poster (English/Spanish) E-Verify Participation Poster (English/Spanish) ## Description We are seeking a Senior Network Security Engineer to join our Zero Trust team and serve as a hands-on technical owner of our Zero Trust Network Access (ZTNA) and micro segmentation platforms. This is not a traditional network security role. While deep expertise in network security architecture is foundational, this position carries an equal mandate to design, build, and operate AI agents and automation workflows that will handle the majority of routine network security tasks, driving toward 70%+ workflow automation and 10x productivity across the function., Zero Trust Architecture & Engineering * Own the day-to-day engineering, configuration, and optimization of ZTNA and microsegmentation across environments. * Design and implement microsegmentation policies that enforce least-privilege network access across data center, cloud, and hybrid workloads. * Drive enterprise-wide ZTNA adoption, partnering with infrastructure, application, and DevOps teams to onboard users and services. * Build and maintain segmentation maps, traffic flow baselines, and policy rule sets aligned to business-critical applications and regulatory boundaries. * Support and troubleshoot network access issues related to ZTNA policy enforcement, split tunneling, and identity-aware access controls. AI Agent Development & Security Automation * Learn to design, build, and manage AI agents (using platforms such as Kindo.ai, n8n, and Claude/Anthropic APIs) that automate routine network security operations including policy reviews, firewall rule audits, segmentation gap analysis, and anomaly triage. * Build AI-assisted runbooks that enable autonomous or semi-autonomous handling of common network security events, escalating only when human judgment is required. * Instrument and monitor AI agent performance, accuracy, and safety using human feedback loops and governance frameworks established by the CISO organization. * Contribute to the team's AI Governance practices, including prompt version control, agent testing, and compliance with the Axos AI Governance Management Directive. Operational Excellence & Continuous Improvement * Participate in incident response for network-layer events, providing technical expertise during investigation and containment. * Document architectures, standard operating procedures, and AI agent configurations to a standard that enables knowledge transfer and auditability. * Stay current on emerging Zero Trust frameworks, AI/ML developments, and network security threats relevant to a federally regulated financial institution., While performing the duties of this position, the employee is required to sit for extended periods of time. Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc. The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. E-Verify and Right to Work Notices Axos participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States. The E-Verify program is an internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)