Senior Network Security Engineer

Job Overview We are seeking a hands-on Network Security Engineer with deep experience in NexGen firewalls such as Palo Alto Networks, Checkpoint and Fortinet technologies to help operate, secure, and continuously improve Arrowstreet’s network security environment. This role will focus on the administration, tuning, troubleshooting, and lifecycle management of NexGen firewalls and NexGen VPN security policies, threat prevention profiles, URL filtering, VPN connectivity, and related network security controls. The successful candidate will have strong practical knowledge of enterprise networking, firewall policy management, packet-level troubleshooting, secure remote access, segmentation, logging, monitoring, and incident support. This role requires someone who can work independently, partner effectively with infrastructure and security teams, and apply sound judgment when supporting production network security infrastructure. Responsibilities Administer, maintain, and improve NexGen firewall infrastructure, including policy rules, NAT, security profiles, zones, interfaces, objects, and routing configurations. Manage management portal configuration, templates, device groups, policy pushes, configuration backups, and rule-base hygiene across the environment. Configure and tune threat prevention, antivirus, anti-spyware, vulnerability protection, URL filtering, DNS security, sandboxing, decryption, and logging profiles. Support remote connectivity operations, including authentication flows, client connectivity, portal and gateway configuration, troubleshooting, and user-impacting incidents. Leverage advanced AI modeling within our SIEM platform to monitor firewall logs, traffic patterns, system health, policy hits, blocked activity, and IPS security events. Use AI to associate and contextualize threats detected by these alerts, uncover attack patterns, prioritize incidents based on risk, and identify policy gaps—enabling proactive tuning and continuous improvement of our security posture. Troubleshoot network security issues across Layer 3 through Layer 7, including routing, NAT, VPN, application identification, SSL decryption, asymmetric traffic, and policy-matching behavior. Perform packet captures, traffic analysis, and root-cause investigations using vendor tools, CLI diagnostics, logging platforms, and network troubleshooting utilities. Participate in firewall rule reviews, access request evaluations, segmentation efforts, cleanup activities, and control validation exercises. Expand the development and integration of advanced AI-powered features within AI Operations (AIOps) service platforms to proactively detect, diagnose, and remediate network and security issues. Drive this innovation by integrating AIOps solutions to strengthen incident management, optimize firewall performance, and enhance user experience across network capacity and routing. Plan and execute routine maintenance, including content updates,…