Senior/Architect Network Security Engineer The Senior/Architect Network Security Engineer is a dual role that combines deep operational expertise with architectural oversight to support and secure the enterprise network infrastructure in a large, distributed academic environment. Reporting to the Director of Network Services, this individual will be hands-on in configuring, maintaining, and optimizing network security technologies such as firewalls, VPNs, and segmentation tools, while also contributing to the design and documentation of secure network architectures. The role requires a strong understanding of modern security frameworks and the ability to translate strategic goals into scalable, resilient, and secure network solutions. This position collaborates closely with teams across information security, compliance, cloud services, and research computing to ensure alignment with cybersecurity best practices and institutional objectives. We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@. Skills and Requirements: Bachelors or Masters degree in Computer Science, Information Security, Networking, or related discipline. 8+ years of progressive experience in enterprise network security roles, including 3+ years in an architecture or leadership capacity. Deep knowledge of network protocols, routing/switching, segmentation, VPN, firewall technologies, and IDS/IPS platforms. Hands-on experience with security operations tools including SIEM, NetFlow, packet analyzers, and vulnerability scanners. Familiarity with Palo Alto, Cisco ASA/Firepower, Fortinet, and cloud-native security tools (Azure/AWS/GCP). Demonstrated knowledge of compliance standards such as NIST, HIPAA, and CMMC. Industry certifications such as CISSP, CISSP-ISSAP, CCIE Security, GIAC (GSEC, GCIA), or TOGAF are strongly preferred. Experience with Zero Trust Network Access (ZTNA) and SASE frameworks: Practical implementation or architectural design experience with modern security paradigms that align with Zero Trust and Secure Access Service Edge models. Proficiency in network automation and scripting: Hands-on experience with tools like Ansible, Python, or REST APIs to automate security configurations, streamline incident response, and enhance operational efficiency. Background in higher education or research computing environments: Familiarity with the unique security challenges and compliance requirements of academic institutions, including research enclaves and grant-funded projects. Participation in industry threat intelligence sharing communities: Active involvement in groups such as REN-ISAC, FS-ISAC, or similar, demonstrating a commitment to collaborative defense and proactive threat hunting.