Senior Network Engineer - Network Security

Description

3 Days Hybrid from any of our locations in RI, NJ, MA, NC, TX or AZ

Role is not relocation eligible. 

As a part of our team, you’re made ready for a fulfilling career with exciting new challenges and opportunities to stretch yourself! While in this role, you will play a critical role in the management of the computer networks of the entirety of the organization. You will work alongside a team of highly skilled engineers while working to plan, implement and oversee the computer networks and infrastructure critical to Citizen’s business operations. Lastly, you will leverage their technical expertise to ensure the stability of Citizens business operations and successful deployment of new branch and office locations. Most importantly, at Citizens, we’re more than a bank and here, you’ll experience new things, create new opportunities, think beyond your role and make an impact!

Primary responsibilities include

Network Security

• Support and implement secure network architectures in AWS, Azure, and on-premises data centers, ensuring high availability, performance, and scalability.
• Develop and document network security standards and guidelines.
• Conduct comprehensive security assessments and remediate findings identified from penetration testing, reducing security risks by 15%.
• Implement network segmentation and access control mechanisms.

Firewall Management

• Manage and optimize the configuration of firewalls (e.g., Palo Alto Networks) to prevent unauthorized access and data breaches.
• Develop and implement firewall rules and policies.
• Monitor firewall logs and alerts for suspicious activity.
• Perform regular firewall updates and maintenance.

Load Balancing

• Support and manage load balancers (ALB/NLB) to ensure high availability and optimal performance of critical applications.
• Configure load balancing algorithms and health checks.
• Monitor load balancer performance and capacity.
• Troubleshoot load balancing issues.

Compliance

• Ensure adherence to industry regulations (e.g., PCI DSS, SOX, GLBA) and internal security policies.
• Conduct regular security audits and risk assessments.
• Implement security controls to meet compliance requirements.
• Stay up-to-date on the latest security regulations and best practices.

Automation and Orchestration

• Support and implement automated processes to improve efficiency and reduce the risk of human error.
• Utilize scripting languages (e.g., Python, PowerShell) and automation tools (e.g., Ansible, Terraform).

Threat Response

Collaborate with security teams to investigate security incidents, identify vulnerabilities, and implement effective countermeasures.

Vendor Engagement

Engage with vendors (e.g., F5, Netskope, Palo Alto Networks, Akamai) to ensure best practices are adhered to, find the root cause for incidents, and to ensure optimal performance and support.

Tier 3 On-Call Support

Provide Tier 3 on-call support for all network technologies, including firewalls, load balancers, and cloud infrastructure. Off-hours support will be required for major incidents classified as P1 or P2; during business hours, you will be required to work the Incident queue for all other incidents. 

Qualifications, Education, Certifications and/or Other Professional Credentials

Technical Skills

• In-depth knowledge of network security protocols (TCP/IP, BGP, OSPF), cloud security best practices, and web application firewalls (WAF).
• Extensive experience with security technologies such as Palo Alto Networks firewalls, F5 load balancers, and Akamai CDN.
• Strong understanding of network segmentation, access control, and intrusion detection/prevention systems.

Education: Bachelor's degree in Computer Science, Information Security, or a related field.

Experience: 4-7 years of proven experience designing and implementing secure network architectures in complex enterprise environments.

GRC Experience: Familiarity with GRC frameworks (e.g., NIST, ISO 27001) is a plus.

Automation Skills: Proficiency in scripting languages (e.g., Python, PowerShell) and experience with automation tools (e.g., Ansible, Terraform).

Cloud Experience: AWS, Azure, GCP, OCI; multi-cloud experience

Certifications: CISSP, CCNP Security, AWS Certified Security - Specialty, Azure Security Engineer Associate, or other relevant certifications are a plus.

Communication and Collaboration: Excellent communication, interpersonal, and teamwork skills. 

Hours & Work Schedule

• Hours per Week: 40-50
• Work Schedule: Weekdays, Monday - Friday during business hours; with change windows in the evenings and weekends

Pay Transparency 

The salary range for this position is $ 99,200 - $ 148,800 per year plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience.   

We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of very local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits.

#LI-Citizens1

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

At Citizens, we are committed to fostering an inclusive culture that enables colleagues to bring their best selves to work every day. Employment decisions are based solely on experience, performance, and ability. Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression (including transgender individuals who are transitioning, have transitioned, or are perceived to be transitioning to the gender with which they identify), genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws.

Equal Employment and Opportunity Employer

Citizens is a brand name of Citizens Bank, N.A. and each of its respective affiliates.