AVP, Network Security Engineer

LPL Financial Corp seeks an AVP Tech Network Engineer, Security to design, engineer, and operate network security solutions and supporting orchestration capabilities.

Responsibilities

• Design and engineer network security solutions using Palo Alto, Cisco FTD, and Fortinet firewalls
• Develop automation using scripting languages such as Python or PERL, leveraging APIs for data exchange
• Engineer and operate VPN and Cisco ISE/NAC remote access environments
• Implement firewall solutions in AWS cloud using an auto-scaling design
• Troubleshoot complex network security issues by identifying root cause and driving continuous platform improvement
• Harden security posture for platform devices to reduce vulnerability footprint
• Manage firewall service requests
• Manage and optimize logging for firewall traffic and rule-based activity
• Maintain security baseline standards, plus design documentation and diagrams
• Travel up to 10% as needed by business requirements

Requirements

• 5+ years of Network and Security Engineering experience, with emphasis on security products from Radware, Fortinet, Cisco, and Palo Alto
• 2+ years with security technologies/products including DDoS, proxy, VPN, firewall orchestration, and/or network access control
• 2+ years of network security hardening and controls, plus experience using monitoring and logging tools such as SolarWinds, LiveNX, and ELK
• 2+ years of network defense technology experience across on-prem and cloud environments

Technologies

• Palo Alto
• Cisco FTD
• Fortinet
• Radware and Radware Defense Pro hardware
• DDOS appliances
• Network access control via Cisco ISE (NAC)
• Orchestration tools and firewall orchestration
• Python, PERL, APIs
• VPN
• AWS (including native security/firewall concepts)
• Mentions of Azure native firewalls
• Monitoring/logging tools: SolarWinds, LiveNX, ELK
• Related security areas referenced: DDoS, proxy, Cisco ISE/NAC

Benefits

• 401K matching
• Health benefits
• Employee stock options
• Paid time off
• Volunteer time off

Pay Range

• USD 103,618 - 172,628 per year
• Actual base salary varies based on factors including relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location

Additional Information

• Work authorization: This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
• Interview communications: LPL will only communicate with applicants directly from an @lplfinancial.com email address and will never conduct interviews online or in a chatroom forum.
• No payment: During an interview, LPL will not request any form of payment or information regarding an applicant’s bank or credit card.

Core Competencies

• Hands-on engineering experience with Radware, Palo Alto, Fortinet, and Cisco security products, including their management platforms
• Critical thinking and ability to work in high-pressure situations due to the unpredictable nature of cyber threats
• Strong interpersonal and presentation skills, with ability to communicate and educate others on complex technologies with business acumen
• Experience with Radware Defense Pro hardware
• Experience with Cisco ISE
• Understanding of network security best practices
• Knowledge of native firewalls in AWS and Azure

Preferences

• Bachelor’s Degree or equivalent work experience
• CCNA/CCNP/CISSP is a plus
• Experience with scripting and automation tools
• Experience with Agile

Location: Fort Mill, SC (hybrid)

Experience level: 5+ years