Principal Security Engineer - Reliability

Lead enterprise reliability and governance for network security platforms in a hybrid role focused on reducing operational and cyber risk.

Responsibilities

• Define and drive reliability, security posture, policy governance, service health indicators, risk measures, and improvement plans for security platforms
• Direct engineering decisions for proxy, firewall, NAC, WAF, secure access, and segmentation to improve scalability, resiliency, and operational simplicity
• Improve firewall rules, proxy policies, NAC/WAF controls, segmentation models, exception handling, certification practices, and compliance-aligned controls
• Lead major incident response and service restoration for security product incidents, driving root cause analysis and prevention of repeat issues
• Expand telemetry, alerting, service health reporting, policy validation, configuration management, automated testing, and self-service capabilities
• Review and guide designs to strengthen security effectiveness, failure isolation, availability, inspection performance, and operational readiness
• Partner across cybersecurity, network, cloud, infrastructure, application, architecture, risk, and compliance teams while mentoring engineers and influencing senior stakeholders

Requirements

• 7+ years of experience in network security, network engineering, or security infrastructure supporting business-critical enterprise network services
• 5+ years expert knowledge of network security platforms including firewalls, proxy, NAC, WAF, ZTNA, segmentation, and secure access
• 5+ years with TCP/IP and core networking concepts including routing, switching, DNS, load balancing, TLS/SSL, and application-layer protocols
• 5+ years applying reliability or SRE practices to infrastructure or security platforms (service health measurement, problem management, operational health metrics, continuous improvement)
• 5+ years improving operational stability and reducing repeat incidents via root cause analysis, post-incident reviews, corrective action planning, systemic remediation, and recurrence prevention
• 5+ years owning corrective actions from post-incident review through implementation, validation, and closure
• 5+ years improving change success rates through risk assessment, peer review, validation testing, rollback planning, and post-change verification
• 5+ years conducting operational readiness reviews, production readiness assessments, failure-mode reviews, or service acceptance reviews
• 5+ years managing vendor escalations, product defects, support cases, and platform lifecycle risks impacting service stability
• 5+ years improving security control effectiveness, audit readiness, exception governance, and policy compliance across network security platforms
• 5+ years hands-on automation/scripting experience with Python, Ansible, Terraform, APIs, or equivalent technologies
• 5+ years improving monitoring, telemetry, logging, and service health visibility

Preferred Qualifications

• Experience influencing enterprise network security architecture and standards
• Strong leadership, communication, mentoring, and stakeholder influence skills
• Relevant certifications: PCNSE, CCNP Security, Fortinet NSE, CISSP, AWS/Azure security, ITIL, or equivalent credentials
• Ability to prioritize reliability improvements using business impact, operational risk, service criticality, control effectiveness, and incident trends
• Proven ability to lead complex incident response, troubleshoot high-impact issues under pressure, restore service, and communicate clearly to stakeholders
• Deep expertise in one or more domains including proxy, firewall, NAC, WAF, or secure access
• Experience with firewall rule lifecycle, policy hygiene, segmentation, and least-privilege models
• Experience tuning WAF policies, reducing false positives, and protecting public applications
• Experience designing NAC policies, identity integration, and zero trust access models
• Experience with network security modernization, cloud security connectivity, or SASE/ZTNA transformation
• Experience in regulated or critical industries such as financial services, healthcare, telecommunications, or similar environments
• Experience reading and interpreting packet captures, proxy logs, firewall logs, WAF events, and NAC telemetry
• Master’s degree in Cybersecurity, Network Engineering, or a related field

Technologies

• Python, Ansible, Terraform, APIs
• TCP/IP, routing, switching, DNS, load balancing, TLS/SSL
• Next-generation firewalls, firewall management platforms
• Secure web proxy, secure internet access
• Network access control (NAC), identity-aware access
• Web application firewall (WAF), application protection
• Secure remote access, ZTNA, SASE
• Network segmentation and micro-segmentation, threat prevention, intrusion prevention, inspection
• Encrypted traffic analysis, logging, telemetry, monitoring, observability platforms
• Automation, configuration management, infrastructure-as-code tooling

Role Details

• Employment Type: Full time
• Role Type: Individual contributor (not a people-manager role)
• Work Model: Hybrid, three days per week in the office
• Eligible Locations: Dallas, TX metro; Charlotte, NC metro; or Chandler, AZ metro
• Escalation Expectations: Provides senior technical escalation for critical incidents and high-risk changes; supports critical incident response as needed; recurring on-call rotation will be defined before offer acceptance
• Travel Expectations: 5% or less

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Additional Information

• Education: Bachelor’s degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience
• Visa Sponsorship: Not eligible for visa sponsorship
• Salary Range: USD 159,000 - 305,000 per year
• Posting End Date: 15 Nov 2026 (job posting may come down early due to volume of applicants)