Principal Network Security Engineer

Northern Trust - Chicago, IL

Full-time - Principal

Chicago, IL

10,001+ employees

Real Estate

About the position

The Principal Network Security Engineer at Northern Trust is a technical expert responsible for the design and implementation of network security changes. This role involves leading a team of engineers, managing the technical lifecycle of products and services, and ensuring smooth transitions to network operations. The engineer will also support complex troubleshooting and contribute to the development of network security standards and documentation.

Responsibilities

• Defining and documenting Network Security Standards
• Creation of Low Level Design documents to meet requirements outlined in the High Level Design
• Creation of detailed Implementation Plans for all engineering related activity
• Procurement activities relating to build and delivery of new services (Project)
• Ensuring the smooth Transition/Handover to Operations in line with agreed Operational Acceptance Process
• Managing Technical Lifecycle Management for all Network & Communications services
• Supporting Architecture in creation and upkeep of a Delivery Roadmap for Network Security
• Supporting the Architecture in scoping activities required to produce the High Level Design
• Supporting Architecture in undertaking Proof of Concept activities
• Ensuring skillsets are relevant and up to date in order to deliver change and provide a high level of support
• Providing escalation support to Operations with complex troubleshooting of Major Incidents as required
• Provide on call escalation support (rota basis) and work extended hours when required

Requirements

• A minimum 10+ years of hands on experience of network security solutions within a global enterprise scale organization (5,000-50,000 users)
• Considerable first-hand experience of design engineering and building resilient and scalable security solutions, ideally within finance or investment banking
• Strong understanding of Layer 2, Layer 3 & Layer 4-7 network and security technologies
• Expert knowledge and experience in NGFW platforms and management tools such as Tufin
• Familiar with a variety of testing tools, networking technologies and techniques to accurately troubleshoot and resolve complex technical problems

Nice-to-haves

• Knowledge and experience of Check Point, Fortinet, Tufin
• Experience with Forescout, Cisco ISE
• Familiarity with F5, Netscaler
• Experience with Microsoft Active Directory, CyberArk
• Knowledge of Azure log analytics
• Experience with Akamai CDN
• Familiarity with Illumio, Zscaler
• Scripting experience with Python, Ansible, Terraform
• Experience with Azure and AWS native firewall and load balancing

Benefits

• Flexible and collaborative work culture
• Opportunities for career growth and movement within the organization
• Commitment to assisting the communities we serve
• Reasonable accommodations for individuals with disabilities