Senior Lead Engineer, Cybersecurity, Network Security

About the role

Designs, engineers, integrates and continuously improves enterprise network security capabilities to protect organizational infrastructure from cyber threats, partnering with architecture and operations teams to deliver secure, scalable solutions.

Key responsibilities

• Design, engineer, integrate and continuously improve enterprise network security capabilities such as next‑generation firewalls, secure remote access, IDS/IPS, secure web gateways, DNS security, NAC, DDoS protection and network segmentation.
• Develop secure network engineering patterns, standards, reference architectures and configuration baselines for data‑center, cloud (AWS, Azure, Google Cloud), remote‑workforce and manufacturing environments.
• Partner with Security Architecture and Enterprise Architecture to translate Zero‑Trust, risk and compliance requirements into implementable network security designs.
• Lead security engineering for platform modernisation, migrations, major upgrades and complex infrastructure initiatives, including proofs of concept and reference implementations.
• Perform security assessments, technical risk analyses, architecture reviews and control‑effectiveness testing to identify gaps and recommend scalable improvements.
• Engineer and verify security telemetry, logging and integrations with Security Operations, Incident Response and Vulnerability Management.

Required profile

• Minimum 6 years of enterprise network security engineering experience with hands‑on implementation of next‑generation firewalls and related security technologies.
• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field; Master’s degree preferred.
• Professional certifications such as CCNP/CCIE Security, Palo Alto Networks, CISSP or cloud‑security certifications are a plus.
• Proven experience securing Azure, AWS, Google Cloud or hybrid cloud networking environments.
• Strong knowledge of routing, switching, TCP/IP, DNS, DHCP, TLS and network traffic inspection.

Required skills

• Next‑generation firewalls (Palo Alto Networks, Cisco, Check Point, Fortinet)
• VPN and secure remote‑access solutions
• IDS/IPS, NAC, DNS security, DDoS protection, network segmentation
• Cloud networking (AWS, Azure, Google Cloud) and hybrid environments
• Scripting, APIs and infrastructure‑as‑code (IaC) for automation
• Security telemetry, SIEM integration, packet capture and protocol analysis
• Zero‑Trust architecture, NIST CSF, CIS Controls