> Markdown version of [/jobs/ext/3841650-it-security-senior-engineer](https://www.wearedevelopers.com/jobs/ext/3841650-it-security-senior-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Senior Engineer - **Company:** Zero Hash Trust Company, LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Bioinformatics, Cloud Computing, Cyber Security, Continuous Integration, Data Room, DDoS Mitigation, Python (Programming Language), Network Security, Routing, Windows PowerShell, Zero Trust Network Access, Salesforce.Com, Security Information and Event Management, Wide Area Networks, Wireless Access Point, Data Logging, Load Balancing, Cloud Platform System, Software Security, Technical Debt, Infrastructure Automation Frameworks, Information Technology, Ddos, Devsecops - **Published:** October 20, 2026 - **Apply:** https://www.builtincolorado.com/job/it-security-senior-engineer/11761573?handler=ApplyRedirect ## About the Role * Bachelor's degree in Computer Science, IT, or related field (preferred) or equivalent experience. * 7-10+ years of hands-on experience in network security engineering, including cloud networking and enterprise platforms. Certifications (Preferred/Highly Desired) * CCNP/CCIE (Security or Enterprise) or equivalent experience. * Cloud networking/security certifications (Azure preferred; AWS/GCP a plus). * SASE/SD-WAN certifications (e.g., Zscaler) are a plus. Technical Skills * Deep expertise in firewall/WAF policy architecture, routing, segmentation, and cloud networking controls. * Proven ability to lead complex troubleshooting and incident response for high-impact events. * Strong understanding of Zero Trust, defense-in-depth, and secure-by-design principles. * Experience designing operationally sustainable solutions (documentation, runbooks, lifecycle management, monitoring). Soft Skills * Ability to communicate complex architecture and risk decisions to both technical and business stakeholders. * Demonstrated leadership through mentorship, technical reviews, and influence across teams. * High ownership, judgment, and ability to prioritize under pressure., If you are a qualified individual w ith a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access jobs.dfinsolutions.com as a result of your disability. You can request a reasonable accommodation by sending an email to [email protected] . At DFIN, protecting your identity is a top priority. Please be aware of scammers impersonating DFIN recruiters. DFIN recruiters will never request personal information via email or text. You will only receive a text from us if you've already been in contact. All automated messages will come from [email protected] . If you ever have doubts about the legitimacy of any communication from us, please do not hesitate to reach out for verification via [email protected] (this email is for general TA questions and is not used for updates on your application status). #BI-Remote ## Description The Senior Network Security Engineer provides advanced engineering expertise and technical leadership for enterprise network security across cloud and on-prem environments. This role leads complex designs and implementations, serves as a senior escalation point for major incidents, and drives modernization initiatives aligned to DFIN's Zero Trust strategy. The senior engineer mentors other engineers, shapes standards, and partners with stakeholders to deliver secure, scalable, and resilient network security platforms. Responsibilities: Architecture, Design & Roadmap Leadership * Lead the design of secure architectures for LAN/WAN, hybrid cloud, and SaaS environments; define reference patterns. * Own medium-to-large initiatives (e.g., segmentation, SASE expansions, firewall modernization) from design through delivery. * Contribute to multi-year roadmaps by identifying gaps, reducing technical debt, and aligning to Zero Trust outcomes. Advanced Network Security Engineering * Engineer and optimize advanced firewall/WAF capabilities, DDoS protections, API security patterns, and load balancing controls. * Design Azure connectivity and security controls at scale (hub/spoke, shared services, private connectivity, routing strategy). * Implement and operationalize microsegmentation strategies and integrate with identity and endpoint signals. * Lead integrations with telemetry and NDR tools to improve detection fidelity and end-to-end visibility. Operational Excellence & Incident Leadership * Act as Level 3 escalation for high-severity incidents; coordinate technical response and ensure timely mitigation. * Lead root-cause analysis, author post-incident reports, and drive systemic fixes and resilience improvements. * Establish and improve runbooks, operational metrics, and reliability practices for owned platforms; guide on-call readiness. Additional Responsibilities DevSecOps & Automation (Technical Lead) * Define automation standards for network/security workflows; build reusable modules and guardrails for safe changes. * Partner with platform engineering to embed secure connectivity controls into CI/CD and infrastructure-as-code pipelines. Mentorship & Cross-Functional Leadership * Mentor engineers in architecture, troubleshooting, and secure design; provide technical reviews and guidance. * Influence stakeholders by presenting options, risks, and recommendations; partner with vendors to resolve complex issues. Technology & Domain Exposure * Enterprise firewalls (on-prem and cloud), WAF, DDoS protection, API security, and load balancing * Microsegmentation/segmentation design and enforcement; Zero Trust access patterns (ZTNA) * SASE/SSE and SD-WAN architectures; identity-integrated access and policy strategies * Azure network architecture at scale (hub/spoke, routing, private endpoints, shared services, resiliency patterns) * Telemetry, logging, SIEM integrations, and NDR tool integrations to improve detection and response * Advanced automation/scripting (Python/PowerShell), CI/CD, and infrastructure-as-code practices, Leads the Network Security Engineering and Operations team, overseeing enterprise network security infrastructure, availability, lifecycle management, monitoring, incident response, compliance, risk mitigation, and 24/7 escalation support. Manages engineers, vendors, budgets, strategic projects, and cross-functional initiatives while communicating cybersecurity risks to technical and executive audiences. Drives automation, resilience, continuous improvement, and preventative security practices across sites, datacenters, and cloud environments. Top Skills: Cloud SolutionsDdos ProtectionFirewallsLoad BalancersMicrosegmentationNetwork MonitoringNetwork Security AutomationRemote Access TechnologiesRoutersSwitchesVulnerability ManagementWeb Application Firewalls (Waf)Wireless Access Points DFIN Solutions Engineer 5 Days Ago Remote or Hybrid United States Senior level Senior level Fintech * Software Partners with sales teams to position Venue Virtual Data Room solutions during complex enterprise sales cycles. Leads discovery sessions, designs recommendations, delivers demonstrations and executive presentations, supports RFPs, security questionnaires, proofs of concept, and pilots, and translates technical capabilities into business value. Builds relationships with legal, finance, corporate development, and executive stakeholders while collaborating with implementation, customer success, product, and engineering teams. Top Skills: AnsaradaCybersecurityDatasiteDealroomFirmroomInformation GovernanceIntralinksSaaSSalesforceVenue Virtual Data Room DFIN