> Markdown version of [/jobs/ext/3122362-senior-network-security-engineer-infrastructure-services](https://www.wearedevelopers.com/jobs/ext/3122362-senior-network-security-engineer-infrastructure-services). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network Security Engineer, Infrastructure Services - **Company:** Apple Inc. - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, Access Network, Artificial Intelligence, Amazon Web Services, Application Layers, Computing Platforms, User Authentication, Microsoft Azure, Border Gateway Protocol, Cisco PIX, Cyber Security, Computer Engineering, Continuous Integration, Software Debugging, Dynamic Multipoint Virtual Private Networks, Data-Flow Analysis, Identity and Access Management, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Multi-protocol Systems, Python (Programming Language), Network Security, Pcap, Routing, Open Shortest Path First (OSPF), Public Key Infrastructure, Remote Access Technology, Ansible, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Engineering, Systems Integration, Wide Area Networks, Transport Layer Security, Large Language Models, HybridCloud, Firewalls (Computer Science), Juniper, Infrastructure Automation Frameworks, Information Technology, Palo Alto Networks, Integration Frameworks, Fortinet, Virtual Agents, Firepower, TACACS+ Protocol, Restful APIs, Terraform, Cisco - **Published:** September 28, 2026 - **Apply:** https://www.jobmonkeyjobs.com/career/28060412/Senior-Network-Security-Engineer-Infrastructure-Services-Texas-All-Cities-7413 ## About the Role 8+ years of enterprise experience designing, deploying, and operating global network security, routing, Switching, remote access VPN, and WAN/SD-WAN architectures. Deep firewall & edge platform expertise: Hands-on mastery of Cisco ASA / Firepower, Palo Alto Networks Firewalls, and Fortinet (FortiGate / FortiOS), including security policy architecture, NAT, NAT64 and platform lifecycle management. Large-scale Remote Access & Zero Trust: Proven track record engineering multi-profile SSL and IPsec remote access services (split/full tunnel, device posture, per-app VPN) and integrating with modern ZTNA/SSE architectures. Advanced IPsec & Site-to-Site Connectivity: Deep expertise in IKEv1/IKEv2, PKI/certificate authentication, crypto suites, VTI, DMVPN/FlexVPN, and resilient tunnel architecture for Client to site VPN, partners, 3PLs, and remote sites. Complex Routing & WAN Edge: Advanced BGP and OSPF routing design across hybrid WAN/SD-WAN environments, including carrier peering, traffic engineering (communities, AS-path manipulation), VRF route-leaking, and L2/L3 segmentation. Identity & Access Management Integration: Strong experience integrating network access with enterprise IAM systems-RADIUS, TACACS+, SAML/SSO, MFA, PKI certificate lifecycle, 802.1X, and NAC. End-to-End Troubleshooting & Telemetry: Exceptional packet-level diagnostic skills (pcap, flow analysis, debugs, MTU/path latency issues) across security policies, overlay/underlay networks, and application layers. Infrastructure Automation & Modern Tooling: Demonstrated proficiency automating network security provisioning and validation using Python, REST APIs, Ansible, or Terraform, with bonus experience leveraging AI/LLM-assisted workflows for operations and triage. Preferred Qualifications Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Electrical Engineering, or a related technical discipline, or equivalent practical experience Professional-level network security certifications, such as CCNP Security, PCNSE (Palo Alto Networks), JNCIP-SEC (Juniper), or equivalent demonstrated expertise. Experience leading large-scale network migrations, such as transitioning legacy VPN and MPLS footprints toward modern Zero Trust (ZTNA), SASE, or SD-WAN architectures. Background in hybrid cloud networking (AWS, Azure, or GCP), including cloud edge firewalls, transit architectures, and dedicated interconnects (Direct Connect / ExpressRoute). Track record of applying software engineering and emerging AI/agentic workflows (Python, CI/CD, IaC, GenAI, Claude) to automate security provisioning and eliminate operational toil. History of cross-functional technical leadership, with experience driving SLO-based reliability, security standards, and operational excellence beyond your immediate team. ## Description very day, Apple's global remote access, VPN, and secure WAN infrastructure powers critical operations across Apple product engineering teams, Corporate users, retail footprint, manufacturing facilities, and external partner ecosystems. At this scale, a single degraded tunnel, routing misconfiguration, or remote site outage can stall a product launch, halt a supply chain, or disrupt a business-critical integration. You will be the engineer closest to that reality-Engineering, Reliability and operation resilient network security services across Cisco, Palo Alto Networks, and Fortinet platforms where reliability is paramount., Engineer Zero Trust Multi-Profile VPN Services Design and scale multi-profile VPN architectures that advance Apple's Zero Trust journey, securing access across diverse user populations, device postures, and business functions. Design Resilient Hybrid SD-WAN Fabrics Architect and deploy resilient hybrid SD-WAN infrastructure that delivers secure, reliable connectivity for remote facilities, 3PL logistics sites, and third-party partner locations globally. Establish Secure Connectivity for Partners & Remote Sites Build and operationalize secure connectivity solutions for remote facilities, supply chain partners, and third-party integrations, ensuring consistent security posture across the ecosystem. Drive Automation & Agentic AI to Eliminate Operational Toil Apply software engineering, infrastructure as code, and agentic AI-driven workflows to transform reactive troubleshooting into predictive, self-healing systems, reducing manual effort and operational risk. Serve as Technical Interface & Trusted Advisor Across Teams Act as the key technical liaison across IS&T, GNS partners, Hardware and Software Product Engineering, InfoSec, and external carriers, guiding product teams through critical launch cutovers and strategic partner onboarding. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)