Senior Network Engineer - Network Security

4 Days in the office from any of our locations in Johnston RI, Dallas TX,

Nashville TN, Iselin NJ, Westwood or Medford MA, or Phoenix AZ and couple other

locations

Role is not relocation eligible.

Senior Network Engineer – Network Security

--------------------------------------------------------------------------------

Responsibilities

• As a Senior Network Engineer on the Network Security team, you will play a
• critical role in managing, securing, and modernizing the enterprise network
• security infrastructure for a large financial institution. Working alongside a
• team of highly skilled engineers, you will plan, implement, and support
• next-generation firewall platforms, network segmentation technologies, and
• security policy automation tools that protect Citizens' mission-critical
• resources and sensitive financial data.
• In this position, you will leverage your deep technical expertise in network
• security engineering to drive operational excellence, support large-scale
• infrastructure projects, and ensure the stability and integrity of Citizens'
• network security posture.
• Primary responsibilities include:
• * Engineer, deploy, and maintain Palo Alto Networks next-generation firewalls
• across data center, cloud, and branch environments, including Panorama
• management, security policy configuration, NAT, SSL decryption, and firmware
• upgrades.
• * Manage and support firewall policy automation and compliance tooling (e.g.,
• AlgoSec), including automated rule implementation, policy optimization, and
• troubleshooting data validation errors.
• * Support microsegmentation initiatives (e.g., Illumio) to enforce zero-trust
• network security principles across the enterprise.
• * Evaluate the adequacy of firewalls, IDS/IPS, proxy gateways, and other
• network security devices; produce security recommendations and respond to
• security advisories and CVEs in a timely manner.
• * Collaborate with Network Architecture, Cloud Networking, NOC, and IT
• operations teams to plan, develop, execute, and support infrastructure and
• network security–related projects.
• * Provide Tier III technical support for network security incidents; assist
• with escalations to vendor TAC (e.g., Palo Alto Networks) and participate in
• the on-call rotation.
• * Support disaster recovery exercises for Panorama and standalone firewall
• environments.
• * Audit technical network security support tickets; document patterns, trends,
• and root cause analysis as they emerge.
• * Contribute to operational documentation, SOPs, and knowledge transfer to
• enable NOC and junior engineers to support day-to-day security operations.
• --------------------------------------------------------------------------------
• Required Qualifications
• * 5+ years of working experience in network security engineering, network
• engineering, or a related field.
• * Hands-on experience with Palo Alto Networks firewalls and Panorama
• (configuration, policy management, upgrades, troubleshooting).
• * Experience with firewall policy management and automation tools (e.g.,
• AlgoSec or equivalent).
• * Strong understanding of network security principles: firewall architecture,
• segmentation, NAT, VPN, IDS/IPS, SSL/TLS decryption.
• * Experience with incident response and escalation in a large enterprise or
• financial services environment.
• * Proficiency with network monitoring and troubleshooting tools (e.g., Splunk,
• packet capture analysis, SNMP).
• * Demonstrated ability to operate in a team environment; strong interpersonal
• and communication skills.
• * Bachelor's degree in Computer Science, Computer Engineering, or related
• discipline (or equivalent experience).
• --------------------------------------------------------------------------------

Preferred Qualifications

• * Palo Alto Networks certification (PCNSA, PCNSE, or PCNSC).
• * Experience with microsegmentation platforms (e.g., Illumio).
• * Experience with cloud security in AWS and/or Azure environments (security
• groups, cloud firewalls, transit gateway architectures).
• * Familiarity with F5 load balancers, Netskope or proxy technologies, and
• Arista network platforms.
• * Experience in the financial services industry; understanding of regulatory
• and compliance requirements (PCI DSS, SOX).
• * Experience with ServiceNow for incident, change, and problem management
• workflows.
• * CCNA, CCNP Security, or JNCIA certification.
• * Experience supporting data center migration or decommission projects.
• --------------------------------------------------------------------------------
• Education & Certifications
• * Bachelor's degree in Computer Science, Computer Engineering, Information
• Technology, or related discipline (required).
• * Palo Alto Networks PCNSE or PCNSC (preferred).
• * Cisco CCNP Security or equivalent (preferred).
• Pay Transparency
• The salary range for this position is $114,000 - $152,000 per year plus an
• opportunity to earn an annual discretionary bonus. Actual pay is based on
• various factors including but not limited to the budget, work location, and
• relevant skills and experience.
• We offer competitive pay, comprehensive medical, dental and vision coverage,
• retirement benefits, maternity/paternity leave, flexible work arrangements,
• education reimbursement, wellness programs and more. Note, Citizens’ paid time
• off policy exceeds the mandatory, paid sick or paid time-away policy of every
• local and state jurisdiction in the United States. For an overview of our
• benefits, visit https://jobs.citizensbank.com/benefits
• [https://jobs.citizensbank.com/benefits]

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide

equal employment and advancement opportunities to all colleagues and applicants

for employment without regard to age, ancestry, color, citizenship, physical or

mental disability, perceived disability or history or record of a disability,

ethnicity, gender, gender identity or expression, genetic information, genetic

characteristic, marital or domestic partner status, victim of domestic violence,

family status/parenthood, medical condition, military or veteran status,

national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s

reproductive health decision making, race, religion, sex, sexual orientation, or

any other category protected by federal, state and/or local laws. At Citizens,

we are committed to fostering an inclusive culture that enables all colleagues

to bring their best selves to work every day and everyone is expected to be

treated with respect and professionalism. Employment decisions are based solely

on merit, qualifications, performance and capability.

Equal Employment and Opportunity Employer

Job Applicant Data Privacy Policy

[https://jobs.citizensbank.com/Job-Applicant-Privacy-Policy]

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a

background check, which may include initial credit, motor vehicle record, public

record, prior employment verification, and criminal background checks. Results

of the background check are individually reviewed based upon legal requirements

imposed by our regulators and with consideration of the nature and gravity of

the background history and the job offered. Any offer of employment will include

further information.