Network Security Engineer

L.L.Bean • Freeport, ME

16d • Hybrid

About The Position

At L.L.Bean, we believe the outdoors brings out the best in all of us. We are committed to fostering a culture of belonging and creating safe, inclusive spaces where everyone feels welcome—both here and Outside. We value individual differences and are dedicated to maintaining an inclusive work environment where everyone can bring the best of their experience and talents and truly thrive. L.L. Bean Inc. Freeport Maine is looking for a Network Security Engineer to join our network team, someone passionate and with proven experience in networking, cloud-delivered security, and infrastructure automation. This role will be responsible for supporting and managing the firewalls, load balancers, VPNs, and Zscaler services that are critical to our day-to-day operations, applying engineering, troubleshooting, technical analysis, and problem-solving expertise to strengthen secure connectivity across the enterprise. We welcome the opportunity for this role to be hybrid based at the corporate headquarters in Freeport, Maine.

Requirements

• Bachelor’s degree in Computer Science, or related areas.
• A minimum of 7+ years of experience.
• Hands-on technical knowledge of networking and security.
• Advanced knowledge of internet protocols such as HTTP(S), TCP/IP, DNS, SSL, DHCP, BGP, OSPF, MPLS, wireless (802.11), network routing, firewalls, secure access, and switching.
• Solid proficiency with Palo Alto, Zscaler, Infoblox, ExtraHop, Splunk, Meraki, Netdisco, and F5 Network.
• Strong network security engineering background with emphasis on cloud-delivered security and zero-trust access.
• Palo Alto NGFW, Palo Alto Panorama, Palo Alto Expedition.
• Zscaler ZIA/ZPA design, administration, troubleshooting, and policy management.
• VPN, NAT, Subinterfaces, LACP, DHCP relay, Virtual routers, PBF.
• Infrastructure as Code and automation using tools such as Ansible, Terraform, or similar frameworks for secure, repeatable network and security deployments.
• F5 Load balancers/Application Delivery.
• Nexus NXOS VPC, LACP, L2/3 VLANs, OSPF, VRF, HSRP, PBR.
• Campus switching L2 VLANs, DHCP snooping, DAI, RSTP, Radius.
• Routing ASR IOS-XE, ISR, EIGRP, OSPF, VRF, PBR, Subinterfaces, VLANs.
• Meraki VPN, SDWAN, MX (firewalls), MS, MR, Wireless.
• Customer service focused.
• Excellent communication skills.
• Ability to work in a team-oriented environment.

Nice To Haves

• Arista, Cisco, Palo Alto, and Zscaler certifications are all preferred.
• A strong understanding of system management and automation tools such as Ansible, Terraform, Arista CloudVision is highly desirable.
• Experience applying Infrastructure as Code practices to network and security environments.
• Nice to have knowledge in Windows Server and Linux operating systems.

Responsibilities

• Design, engineer, and support firewalls, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and routed and switched networks.
• Support advanced problem analysis and isolate highly complex issues.
• Develop effective working relationships with technology and business stakeholders.
• Maximize network performance and security through ongoing monitoring, troubleshooting, and continuous improvement.
• Help define and maintain secure, repeatable infrastructure through automation and Infrastructure as Code practices.
• Provide technical leadership and coaching to other members of the team.
• Participate in an on-call rotation.
• On-site work is required.

Benefits

• Programs and perks designed to support your health and financial goals.
• Maintaining a healthy work-life balance and re-charging outside are all part of the plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior