Senior Network Security Engineer

Location(s):

Atlanta: 2300 Windy Ridge Pkwy SE, Suite750, Atlanta, GA 30339

La Vista:12325 Port Grace Blvd, La Vista, NE 68128

Oakdale: 7755 3rd St. N, Oakdale, MN 55128

Scottsdale: 18700 N Hayden Rd, Suite 255, Scottsdale, AZ 85255

St. Petersburg: 877 Executive Center Dr. W, Suite 300, St. Petersburg, FL 33702

Osaic has returned to the office on a hybrid schedule requiring a minimum of 4 days weekly in the office. Applicants should be located at one of our hubs listed above and must be willing to work this schedule.

Role Type: Full-time, Non-Exempt

Salary: $130,000 - $155,000 per year + annual performance-based bonus

Actual compensation offered will be determined individually, based on a number of job-related factors, including location, skills, licensure, experience, and education.

Our competitive compensation is just one component of Osaic's total compensation package. Additional benefits include health, vision, dental insurance, 401k, paid time away, volunteer days and much more. To view more details of what you can look forward to, visit our careers page: Osaic Benefits.

Summary:

The Senior Network Security Engineer plays a key role in securing our enterprise network and cloud environments. This position leads advanced engineering initiatives, strengthens our threat-detection capabilities, and drives zero trust and segmentation strategies across hybrid infrastructures. The ideal candidate excels at solving complex technical problems, automating repeatable tasks, and collaborating with cross-functional teams to enhance our overall security posture. This position will report to the Head of IAM and Network Security Eng & Ops.

Education Requirements:

Bachelor's degree preferred, high school diploma (or equivalent) in combination with significant experience will be considered in lieu of degree. Minimum of high school diploma or equivalent is required.

Responsibilities:

• Design and implement modern network security architectures across on-premises, cloud, and hybrid environments.
• Lead engineering, configuration, and optimization of NGFWs, IPS/IDS, VPN, WAF/WAAP, DNS security, and DDoS protections.
• Drive zero trust segmentation, secure connectivity patterns, and micro segmentation strategies.
• Develop, tune, and validate detection logic in partnership with SecOps using SIEM platforms.
• Lead complex migrations, upgrades, and cutovers with high reliability and minimal downtime.
• Troubleshoot advanced traffic flow issues using packet captures, network logs, and threat intelligence.
• Enhance cloud network security controls (Azure Firewall, NSGs/ASGs, Private Endpoints, UDRs, and related services).
• Produce high quality documentation including architecture, diagrams, and change plans.
• Mentor junior and mid-level engineers and contribute to standards, best practices, and reusable technical patterns.
• Collaborate with cloud, identity, networking, infrastructure, and incident response teams on secure-by-design solutions.
• All other duties as assigned.

Basic Requirements:

• 6-10+ years of experience in network security engineering or a closely related field.
• Strong expertise with at least one major NGFW platform (Palo Alto, Fortinet, Cisco, Check Point).
• Deep understanding of routing, VPN, SD-WAN, segmentation, TLS/SSL, and core network security concepts.
• Experience with Azure networking and security services (NSG/ASG, Azure Firewall, Private Endpoints, UDRs).
• Hands-on experience with SIEM tooling.
• Strong troubleshooting, packet analysis, and problem-solving skills.
• Excellent communication and documentation abilities.
• Demonstrated ability to lead complex projects with minimal supervision.

Preferred Requirements:

• 10+ years' experience in financial services operations or broker-dealer setting.
• Strong understanding of financial-services regulations applicable to IT and cybersecurity (NYDFS, SEC Reg S-P, PIDSA)