Job Description4 Days in the office from any of our locations in Johnston RI,Dallas TX, Nashville TN, Iselin NJ, Westwood or Medford MA, or Phoenix AZ and couple other locationsRole is not relocation eligible. Senior Network Engineer - Network SecurityResponsibilitiesAs a Senior Network Engineer on the Network Security team, you will play a critical role in managing, securing, and modernizing the enterprise network security infrastructure for a large financial institution. Working alongside a team of highly skilled engineers, you will plan, implement, and support next-generation firewall platforms, network segmentation technologies, and security policy automation tools that protect Citizens' mission-critical resources and sensitive financial data.
In this position, you will leverage your deep technical expertise in network security engineering to drive operational excellence, support large-scale infrastructure projects, and ensure the stability and integrity of Citizens' network security posture.
Primary responsibilities include:- Engineer, deploy, and maintain Palo Alto Networks next-generation firewalls across data center, cloud, and branch environments, including Panorama management, security policy configuration, NAT, SSL decryption, and firmware upgrades.
- Manage and support firewall policy automation and compliance tooling (e.g., AlgoSec), including automated rule implementation, policy optimization, and troubleshooting data validation errors.
- Support microsegmentation initiatives (e.g., Illumio) to enforce zero-trust network security principles across the enterprise.
- Evaluate the adequacy of firewalls, IDS/IPS, proxy gateways, and other network security devices; produce security recommendations and respond to security advisories and CVEs in a timely manner.
- Collaborate with Network Architecture, Cloud Networking, NOC, and IT operations teams to plan, develop, execute, and support infrastructure and network security-related projects.
- Provide Tier III technical support for network security incidents; assist with escalations to vendor TAC (e.g., Palo Alto Networks) and participate in the on-call rotation.
- Support disaster recovery exercises for Panorama and standalone firewall environments.
- Audit technical network security support tickets; document patterns, trends, and root cause analysis as they emerge.
- Contribute to operational documentation, SOPs, and knowledge transfer to enable NOC and junior engineers to support day-to-day security operations.
Required Qualifications- 5+ years of working experience in network security engineering, network engineering, or a related field.
- Hands-on experience with Palo Alto Networks firewalls and Panorama (configuration, policy management, upgrades, troubleshooting).
- Experience with firewall policy management and automation tools (e.g., AlgoSec or equivalent).
- Strong understanding of network security principles: firewall architecture, segmentation, NAT, VPN, IDS/IPS, SSL/TLS decryption.
- Experience with incident response and escalation in a large enterprise or financial services environment.
- Proficiency with network monitoring and troubleshooting tools (e.g., Splunk, packet capture analysis, SNMP).
- Demonstrated ability to operate in a team environment; strong interpersonal and communication skills.
- Bachelor's degree in Computer Science, Computer Engineering, or related discipline (or equivalent experience).
Preferred Qualifications- Palo Alto Networks certification (PCNSA, PCNSE, or PCNSC).
- Experience with microsegmentation platforms (e.g., Illumio).
- Experience with cloud security in AWS and/or Azure environments (security groups, cloud firewalls, transit gateway architectures).
- Familiarity with F5 load balancers, Netskope or proxy technologies, and Arista network platforms.
- Experience in the financial services industry; understanding of regulatory and compliance requirements (PCI DSS, SOX).
- Experience with ServiceNow for incident, change, and problem management workflows.
- CCNA, CCNP Security, or JNCIA certification.
- Experience supporting data center migration or decommission projects.
Education & Certifications- Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or related discipline (required).
- Palo Alto Networks PCNSE or PCNSC (preferred).
- Cisco CCNP Security or equivalent (preferred).
Pay Transparency The salary range for this position is $114,000 - $152,000 per year plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the budget, work location, and relevant skills and experience.
We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens' paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits
