Job Title: Senior Network Security EngineerDepartment:  Information TechnologyReports to: Director - Network Technology Location: In Office,  Orange CTThe base salary range for this position is dependent upon experience and location, ranging from: $114,332.80 - $142,916Job SummaryWe are seeking a highly skilled Senior Network Security Engineer to join our team and play a key role in securing, optimizing, and transforming our enterprise network infrastructure. The ideal candidate will have deep expertise in firewall security, NAT, IPSEC, SD-WAN, routing protocols (EIGRP, BGP, OSPF), and cloud security solutions. This position will focus on managing and enhancing our security infrastructure, which includes:<ul><li>Cisco ASA, Checkpoint, Fortinet FortiGate, Palo Alto Firewalls.</li><li>Radware for DDoS protection.</li><li>Zscaler ZIA/ZPA for cloud security.</li><li>SD-WAN for optimized global connectivity.</li><li>EIGRP, BGP, and OSPF-based network routing.</li><li>NAT policy design and implementation</li></ul>A key initiative for this role is leading the migration from Checkpoint to Fortinet firewalls while ensuring seamless network security operations. Additionally, the engineer will support and enhance our SD-WAN deployment for optimized global connectivity and application performance.Key Responsibilities<ul><li>Lead the migration from Checkpoint to Fortinet, including policy conversion, rule optimization, and traffic validation.</li><li>Manage and maintain Cisco ASA, Palo Alto, Fortinet, and Checkpoint firewalls across corporate, cloud, and remote sites.</li><li>Design and optimize firewall rule sets for improved security, performance, and compliance.</li><li>Perform risk assessments and firewall audits to ensure network security best practices.</li><li>Manage and optimize SD-WAN architecture to improve application performance and reduce latency.</li><li>Implement policy-based traffic steering, failover mechanisms, and WAN optimization.</li><li>Ensure seamless integration between SD-WAN, firewalls, cloud security solutions, and on-prem networks.</li><li>Troubleshoot SD-WAN performance issues, routing conflicts, and connectivity problems.</li></ul><ul><li>Work with network and security engineers to ensure secure connectivity between on-premises, branch locations, and cloud.</li><li>Design and implement NAT policies, including static NAT, dynamic NAT, and PAT (Port Address Translation).</li><li>Configure and troubleshoot EIGRP, BGP, and OSPF for enterprise and cloud routing.</li><li>Optimize routing policies to ensure high availability, redundancy, and performance.</li><li>Work closely with the network engineering team to enhance SD-WAN, inter-site, and cloud connectivity.</li><li>Administer and optimize Zscaler ZIA/ZPA solutions for secure cloud access and web filtering.</li><li>Implement zero-trust security policies for cloud applications and remote users.</li><li>Troubleshoot Zscaler tunnels, proxy configurations, and application access issues.</li><li>Implement and maintain Radware DDoS protection to safeguard network infrastructure from volumetric and application-layer attacks.</li><li>Configure IPS/IDS solutions to detect and mitigate security threats.</li><li>Work with SOC teams to analyze and respond to security incidents.</li><li>Lead firewall, SD-WAN, NAT, and routing issue troubleshooting affecting business-critical applications.</li><li>Perform packet capture analysis and use security logs to diagnose network issues.</li><li>Work with vendors (Cisco, Fortinet, Palo Alto, Zscaler) to resolve complex technical issues.</li><li>Develop and enforce firewall and network security policies in compliance with NIST, CIS benchmarks, and ISO 27001 standards.</li><li>Conduct regular security audits and risk assessments.</li><li>Maintain up-to-date documentation of firewall rules, SD-WAN policies, and security configurations.</li><li>Develop scripts (Python, Bash, PowerShell) for automating firewall audits and SD-WAN policy updates.</li><li>Optimize firewall and SD-WAN policies to reduce latency and improve efficiency.</li><li>Implement network automation frameworks to streamline security operations.</li></ul>Required Skills &amp; Experience<ul><li>5-8 years of experience in network security engineering.</li><li>Expertise in Fortinet FortiGate, Checkpoint, Palo Alto, and Cisco ASA firewalls.</li><li>Strong knowledge of SD-WAN solutions (Fortinet SD-WAN, Cisco SD-WAN, Prisma Access).</li><li>Experience configuring and troubleshooting EIGRP, BGP, and OSPF routing protocols.</li><li>Hands-on experience managing Zscaler ZIA/ZPA for cloud security.</li><li>Proficiency in VPN technologies (IPSec, SSL, GRE, DMVPN, L2TP) and their security implications.</li><li>Strong skills in NAT, firewall rule optimization, and routing table analysis.</li><li>Experience with Radware DDoS protection, IPS/IDS, and threat mitigation.</li><li>Knowledge of zero-trust security architectures and secure SD-WAN implementation.</li><li>Strong analytical skills for troubleshooting network security issues, including packet captures and firewall logs.</li></ul>Preferred Qualifications<ul><li>Certifications: Fortinet NSE 4/7, Checkpoint CCSA/CCSE, Palo Alto PCNSA/PCNSE, Cisco CCNP Security, Zscaler ZCCP, SD-WAN certifications.</li><li>Experience with AWS, Azure, and GCP cloud security best practices.</li><li>Familiarity with SIEM solutions for security event monitoring.</li><li>Experience automating security tasks using Python, Ansible, or Terraform.</li></ul>Company:AVANGRID MANAGEMENT COMPANY, LLC.Mobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law. If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at <a href="mailto:careers@avangrid.com">careers@avangrid.com</a>.Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions.  This does not include those that will work for Avangrid Power.Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&amp;P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.Job Posting End Date:December-31-2025

Avangrid is a leading sustainable energy company transitioning America toward a clean and connected future headquartered in Orange, CT, and has a footprint in 24 states with $40 billion in assets. Our primary businesses are Networks, which serves 3.3 million electric and natural gas customers in the Northeast, and Renewables, the third-largest renewable energy company in the U.S. with a diverse onshore and offshore renewable energy portfolio. With more than 7,000 employees, Avangrid has built a culture that blends diversity, equity and inclusion guided by the company&rsquo;s ESG+F framework and the UN Sustainable Development Goals. This has led to recognition by JUST Capital in 2021 and 2022 as one of America&rsquo;s best corporate citizens and second in utilities for our commitment to the environment and the communities we serve. Avangrid has been named one of the World&rsquo;s Most Ethical Companies for four consecutive years by the Ethisphere Institute.

Senior Network Security Engineer

Job Title: Senior Network Security EngineerDepartment:&nbsp; Information TechnologyReports to: Director - Network Technology Location: In Office, &nbsp;Orange CTThe base salary range for this position is dependent upon experience and location, ranging from: $114,332.80 - $142,916Job SummaryWe are seeking a highly skilled&nbsp;Senior Network Security Engineer&nbsp;to join our team and play a key role in&nbsp;securing, optimizing, and transforming our enterprise network infrastructure. The ideal candidate will have deep expertise in&nbsp;firewall security, NAT, IPSEC, SD-WAN, routing protocols (EIGRP, BGP, OSPF), and cloud security solutions. This position will focus on managing and enhancing our security infrastructure, which includes:<ul><li>Cisco ASA, Checkpoint, Fortinet FortiGate, Palo Alto Firewalls.</li><li>Radware for DDoS protection.</li><li>Zscaler ZIA/ZPA for cloud security.</li><li>SD-WAN for optimized global connectivity.</li><li>EIGRP, BGP, and OSPF-based network routing.</li><li>NAT policy design and implementation</li></ul>A key initiative for this role is leading the&nbsp;migration from Checkpoint to Fortinet firewalls&nbsp;while ensuring seamless network security operations. Additionally, the engineer will support and enhance our&nbsp;SD-WAN deployment&nbsp;for optimized global connectivity and application performance.Key Responsibilities<ul><li>Lead the&nbsp;migration from Checkpoint to Fortinet, including&nbsp;policy conversion, rule optimization, and traffic validation.</li><li>Manage and maintain&nbsp;Cisco ASA, Palo Alto, Fortinet, and Checkpoint firewalls&nbsp;across corporate, cloud, and remote sites.</li><li>Design and optimize firewall rule sets for improved&nbsp;security, performance, and compliance.</li><li>Perform&nbsp;risk assessments and firewall audits&nbsp;to ensure network security best practices.</li><li>Manage and optimize&nbsp;SD-WAN architecture&nbsp;to improve application performance and reduce latency.</li><li>Implement&nbsp;policy-based traffic steering, failover mechanisms, and WAN optimization.</li><li>Ensure seamless&nbsp;integration between SD-WAN, firewalls, cloud security solutions, and on-prem networks.</li><li>Troubleshoot&nbsp;SD-WAN performance issues, routing conflicts, and connectivity problems.</li></ul><ul><li>Work with network and security engineers to ensure&nbsp;secure connectivity between on-premises, branch locations, and cloud.</li><li>Design and implement&nbsp;NAT policies, including&nbsp;static NAT, dynamic NAT, and PAT (Port Address Translation).</li><li>Configure and troubleshoot&nbsp;EIGRP, BGP, and OSPF&nbsp;for enterprise and cloud routing.</li><li>Optimize routing policies to ensure&nbsp;high availability, redundancy, and performance.</li><li>Work closely with the network engineering team to enhance&nbsp;SD-WAN, inter-site, and cloud connectivity.</li><li>Administer and optimize&nbsp;Zscaler ZIA/ZPA solutions&nbsp;for&nbsp;secure cloud access and web filtering.</li><li>Implement&nbsp;zero-trust security policies&nbsp;for cloud applications and remote users.</li><li>Troubleshoot&nbsp;Zscaler tunnels, proxy configurations, and application access issues.</li><li>Implement and maintain&nbsp;Radware DDoS protection&nbsp;to safeguard network infrastructure from volumetric and application-layer attacks.</li><li>Configure&nbsp;IPS/IDS solutions&nbsp;to detect and mitigate security threats.</li><li>Work with&nbsp;SOC teams&nbsp;to analyze and respond to security incidents.</li><li>Lead&nbsp;firewall, SD-WAN, NAT, and routing issue troubleshooting&nbsp;affecting business-critical applications.</li><li>Perform&nbsp;packet capture analysis&nbsp;and use security logs to diagnose network issues.</li><li>Work with vendors (Cisco, Fortinet, Palo Alto, Zscaler) to resolve complex technical issues.</li><li>Develop and enforce&nbsp;firewall and network security policies&nbsp;in compliance with&nbsp;NIST, CIS benchmarks, and ISO 27001 standards.</li><li>Conduct&nbsp;regular security audits and risk assessments.</li><li>Maintain up-to-date&nbsp;documentation of firewall rules, SD-WAN policies, and security configurations.</li><li>Develop&nbsp;scripts (Python, Bash, PowerShell)&nbsp;for automating firewall audits and SD-WAN policy updates.</li><li>Optimize firewall and SD-WAN policies to&nbsp;reduce latency and improve efficiency.</li><li>Implement&nbsp;network automation frameworks&nbsp;to streamline security operations.</li></ul>Required Skills &amp; Experience<ul><li>5-8 years of experience&nbsp;in&nbsp;network security engineering.</li><li>Expertise in&nbsp;Fortinet FortiGate, Checkpoint, Palo Alto, and Cisco ASA firewalls.</li><li>Strong knowledge of&nbsp;SD-WAN solutions (Fortinet SD-WAN, Cisco SD-WAN, Prisma Access).</li><li>Experience configuring and troubleshooting&nbsp;EIGRP, BGP, and OSPF routing protocols.</li><li>Hands-on experience managing&nbsp;Zscaler ZIA/ZPA&nbsp;for cloud security.</li><li>Proficiency in&nbsp;VPN technologies (IPSec, SSL, GRE, DMVPN, L2TP)&nbsp;and their security implications.</li><li>Strong skills in&nbsp;NAT, firewall rule optimization, and routing table analysis.</li><li>Experience with&nbsp;Radware DDoS protection, IPS/IDS, and threat mitigation.</li><li>Knowledge of&nbsp;zero-trust security architectures and secure SD-WAN implementation.</li><li>Strong analytical skills for&nbsp;troubleshooting network security issues, including packet captures and firewall logs.</li></ul>Preferred Qualifications<ul><li>Certifications:&nbsp;Fortinet NSE 4/7, Checkpoint CCSA/CCSE, Palo Alto PCNSA/PCNSE, Cisco CCNP Security, Zscaler ZCCP, SD-WAN certifications.</li><li>Experience with&nbsp;AWS, Azure, and GCP cloud security best practices.</li><li>Familiarity with&nbsp;SIEM solutions&nbsp;for security event monitoring.</li><li>Experience&nbsp;automating security tasks&nbsp;using Python, Ansible, or Terraform.</li></ul>Company:AVANGRID MANAGEMENT COMPANY, LLC.Mobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law. If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at <a href="mailto:careers@avangrid.com">careers@avangrid.com</a>.Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions. &nbsp;This does not include those that will work for Avangrid Power.Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&amp;P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.Job Posting End Date:December-31-2025

Senior Network Security Engineer

About the Job

About the Company

Iberdrola

Similar Jobs

Senior Infrastructure Specialist

Senior Infrastructure Specialist

Lead Engineer - Network

Lead Engineer - Network

Senior Network Engineer

Senior Network Engineer

Network Engineer

Network Engineer

Senior Network Engineer

Senior Network Engineer

Network & Security Engineer

Network & Security Engineer

Senior Network Systems Engineer

Senior Network Systems Engineer

Corporate Network Engineer

Corporate Network Engineer

Lead Engineer - Network

Lead Engineer - Network

Senior Cybersecurity Engineer

Senior Cybersecurity Engineer