Corporate Vice President - Senior Network Security Engineer

New York Life•New York, NY
•$133,000 - $190,000•Hybrid

About The Position

The Senior Network Security Engineer will design, build, and operate secure network infrastructure across on-premises and cloud environments. This technical leadership role focuses on modernizing network security, transitioning from traditional perimeter models toward zero trust, and delivering consistent, auditable, automated controls through infrastructure as code. The role spans hands-on troubleshooting and cloud network architecture, as well as developing and deploying Terraform modules through CI/CD pipelines. The successful candidate will work across data center, branch, and public cloud environments; partner with cloud, application, SOC, and compliance teams; contribute to network incident response; and document architecture, standards, and runbooks. The position also includes mentoring junior engineers. The employer states that candidates will be selected based on expertise and career trajectory rather than a checklist of tools or a specific number of years.

Requirements

  • At least 7 years of experience in network engineering, network security, or a closely related field.
  • Strong command of TCP/IP networking, including subnetting, NAT, DNS, DHCP, and packet-level troubleshooting.
  • Demonstrated experience designing network architectures, including segmentation, high availability, and defense in depth.
  • Hands-on experience with enterprise firewalls and cloud-native firewall services.
  • Solid understanding of VPN technologies, including IPsec, site-to-site, and remote access, and their operational tradeoffs.
  • Working knowledge of routing protocols and concepts, including BGP, OSPF, static routing, route filtering, and path control.
  • Deep understanding of SSL/TLS, PKI, certificate management, and encrypted traffic inspection.
  • Experience with web proxies and secure web gateways.
  • Experience with API gateways and securing API traffic.
  • Experience deploying or operating ZTNA solutions.
  • Proficiency with infrastructure-as-code principles and Terraform, including modules, state management, and workflows.
  • Experience building or contributing to CI/CD pipelines for infrastructure delivery.
  • Strong hands-on experience with AWS networking and security services.
  • Excellent written and verbal communication skills, including the ability to explain technical risk to non-technical audiences.

Nice To Haves

  • Experience with Google Cloud Platform networking and security, including VPC, Cloud Armor, Cloud NAT, and Private Service Connect.
  • Experience in multi-cloud or hybrid connectivity designs.
  • Scripting or automation skills in Python, Bash, or Go.
  • Experience with network observability tooling, including flow logs, packet capture, and SIEM integration.
  • Knowledge of compliance frameworks such as NIST, CIS, SOC 2, PCI DSS, or ISO 27001.
  • Relevant certifications such as AWS Advanced Networking Specialty, AWS Security Specialty, CISSP, CCNP Security, PCNSE, or HashiCorp Terraform Associate.
  • Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Responsibilities

  • Design and implement secure network architectures across data center, branch, and public cloud environments.
  • Engineer, deploy, and manage firewalls, VPNs, web proxies, and API gateways, including policy design, rule-base hygiene, and lifecycle management.
  • Engineer, operate, and manage zero trust network access (ZTNA) remote access solutions.
  • Build and maintain secure AWS connectivity using VPCs, Transit Gateway, PrivateLink, Network Firewall, load balancers, security groups, and network ACLs; use GCP where applicable.
  • Manage SSL/TLS inspection and decryption policies, cipher and protocol standards, and mutual TLS for service-to-service traffic.
  • Define and deliver network security controls as code using Terraform, with peer review, testing, and version control.
  • Troubleshoot complex connectivity, performance, and security issues across Layers 3 through 7.
  • Partner with cloud, application, SOC, and compliance teams to translate security requirements into practical technical solutions.
  • Contribute to network-related incident response, including investigation, containment, and post-incident improvements.
  • Produce architecture documentation, standards, and runbooks, and mentor junior engineers.

Benefits

  • Annual discretionary bonus; employees may also be eligible to participate in an incentive program.
  • Comprehensive employee benefits package.
  • Leave programs.
  • Adoption assistance.
  • Student loan repayment programs.
  • Employee giving and volunteerism supported by the Foundation.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service