Principal Network Security Engineer

POSITION SUMMARY: Excellent opportunity for a highly skilled and motivated Principal Network Security Engineer. In this role, you’ll bring your consultative style and influential approach to contribute to the architecture, implementation, and evolution of our network security operations. You’ll work cross-functionally with IT, Security, and business leaders to secure critical infrastructure, lead major security projects, and drive innovation in our security posture and network reliability.

Reporting directly to the Manager of IT Network & Security, this role is responsible for understanding MIB’s business requirements to ensure that the network and security infrastructure aligns with those needs. Key responsibilities include planning, scheduling, implementing, and maintaining data center and data communication infrastructure, as well as all related security services and products.

What You Bring to the Table

Technical Expertise

Candidates should have a minimum of 10+ years’ experience in the following technologies (can be concurrent).

• Extensive experience designing, implementing, and securing enterprise networks.
• Expert understanding of Palo Alto Layer 7 Firewalls.
• Deep expertise with F5 Appliances, PKI implementation and management, and core network services (DNS, Proxy, DHCP, NTP, VPN, SNMP).
• Expertise with firewall security policies, segmentation, and intrusion prevention (Palo Alto, Cisco, F5), including Application Layer Policies.
• Expertise with F5 rule creation and management, including F5 Load Balancers, GTM, APM.
• Experience with cloud security (AWS/Azure security tools, IAM, network controls).
• Experience with hybrid networks, including data centers and cloud interconnects.
• Automation & Scripting: Strong skills in Python, Terraform, or Ansible for network and security automation.
• Deep traffic analysis and troubleshooting (Wireshark and Cloud Native Tools).
• Identity & Access Management expertise, including Okta, Azure AD, MFA, and SSO architectures.
• Public-Private Key Encryption (PKI) expertise, including management of signing servers, PKI stores, on-premise and in cloud, preferrable with Digicert technologies.

Soft Skills & Leadership

• Proven ability to mentor of engineering teams.
• Strong strategic thinking—aligning security initiatives with business goals.
• Excellent deductive-reasoning and problem-solving skills.
• Ability to communicate complex security and network concepts to both technical and non-technical stakeholders.
• Ability to execute both short-term tactical projects and long-term strategic initiatives.
• Experience with vendor management and evaluating security solutions.
• Ability to work independently and in teams, with excellent communication abilities to all levels of internal and external stakeholders.

Education & Certifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field (Master’s preferred). Relevant experience or certifications may be substituted.
• Desired Certifications: One or more relevant certifications that might include: CCNP/CCIE (Cisco), PCNSE (Palo Alto), AWS Advanced Networking/Security, Azure Security Certification.

What You’ll Do

Key Responsibilities

Networking

• Architect, implement, and continuously improve secure, scalable, and high-availability network infrastructures.
• Conduct research and make recommendations on network products, services, protocols, and standards in support of network procurement and development efforts.
• Ensure effectiveness of security solutions, including firewalls, network access control solutions, and intrusion detection systems.
• Define network security best practices to align with business objectives.
• Provide technical leadership and mentorship to network security engineers and IT staff.
• Serve as the final escalation point for complex IT and networking issues.
• Work closely with Information Technology (IT) Teams to assess and implement network technologies to achieve to project deliverables.
• Effectively collaborate with Infrastructure, Server and Storage, Software Development, Helpdesk, and Project Management teams on a frequent basis.
• Work closely with managed service providers, vendors, carriers, and clients on network implementation, changes, optimization, and troubleshooting.
• Support scheduled off-hours change windows and on-call schedules, as needed.

Security

• Support zero-trust security architectures and access control strategies.
• Ensure compliance with HIPAA, SOC2, and NIST security standards.
• Work closely with Enterprise Security Teams to assess emerging threats and proactively improve security measures.

Cloud & Emerging Technology Security

• Secure hybrid and multi-cloud environments (AWS, Azure, On-Premise).
• Implement and manage cloud-native security tools (AWS Security Hub, GuardDuty, etc.).
• Implement and manage next generation security tools (Palo Alto, F5)
• Define secure DevOps (DevSecOps) best practices for network security automation.

Incident Response

• Support security incident response efforts related to network intrusions or vulnerabilities.
• Develop and test disaster recovery and business continuity plans related to network security.
• Support disaster recovery and business continuity tests.
• Utilize AI-driven threat detection and response solutions to enhance network defenses.

Most importantly, successful candidates will be aligned with MIB’s Core Values in behaviors, actions, and results:

• Think Like a Client
• Act Like an Owner
• Make a Difference