Senior Network Security Engineer

Acrisure•Grand Rapids, MI

1d•Onsite

About The Position

Acrisure is a global fintech leader that empowers businesses and individuals with customized solutions across insurance, cybersecurity, mortgage services, and more. We are seeking a Senior Network Security Engineer to play a key technical role in IT Security as Acrisure integrates its newly acquired companies. This role will involve collaborating with diverse IT teams, providing input on secure architecture, design, and implementation, and ensuring a smooth and secure transition process. The engineer will conduct security architecture design reviews, design, implement, and manage enterprise network security architecture across on-premises and cloud environments, and deploy and maintain network security controls. Key responsibilities include leading network segmentation and Zero Trust Network Access (ZTNA) initiatives, staying ahead of emerging threats, designing and building security architectures for cloud and hybrid environments (Azure/M365), monitoring and responding to threats, securing hybrid connectivity solutions, and partnering with teams to investigate and remediate network-based incidents. Automation of network security deployments using Infrastructure as Code is also a key aspect of this role.

Requirements

7 + years of experience in IT security engineering, architecture or a related field
Strong knowledge of security technologies and best practices
Experience collaborating with network, datacenter, and systems teams
Experience with risk assessments, vulnerability testing, and incident response
Deep understanding of Microsoft 365, Azure AD, Cloud and container security, and conditional access.
Deep understanding of networking fundamentals and protocols (TCP/IP, DNS, HTTP/S, BGP, routing and switching) and how they relate to security architecture and threat vectors.
Hands-on experience with leading network security platforms (e.g., Palo Alto, Fortinet, Check Point) and network monitoring/analysis tools (e.g., Wireshark, Zeek, NetFlow analyzers).
Expertise with tools such as CSPM, CWPP, Defender suite, SIEM/SOAR
Experience with Infrastructure as Code and cloud automation (Terraform, Powershell, Azure CLI, etc.)
Strong communication and collaboration skills

Nice To Haves

Security certifications such as CISSP, Azure Security Engineering, MCCA, GIAC or equivalent desired

Responsibilities

Play a key technical role in IT Security as Acrisure integrates its newly acquired companies.
Collaborate effectively with our diverse IT teams, including Datacenter, Network Operations, and Cloud teams.
Provide critical input on secure architecture, design, and implementation, helping to elevate our IT security infrastructure.
Conduct thorough security architecture design reviews and provide informed recommendations for proposed IT solutions.
Design, implement, and manage enterprise network security architecture across on-premises and cloud environments.
Deploy and maintain network security controls including next-generation firewalls, IDS/IPS, WAF, and DDoS protection.
Lead network segmentation and Zero Trust Network Access (ZTNA) initiatives to reduce attack surface and enforce least-privilege access.
Understand emerging threats and recommend necessary remediation steps to mitigate the current threat landscape.
Design, build, and maintain security architectures for cloud and hybrid environments, mainly Azure/M365 with a focus on Zero Trust privilege models, with some emphasis on Conditional Access Policies, Hardening Guidelines, Microsoft security controls, etc.
Monitor, analyze, and respond to threats using network telemetry (NetFlow, PCAP, IDS alerts) and security tools.
Secure hybrid connectivity solutions including site-to-site VPNs, remote access VPNs, and private cloud networking (e.g., ExpressRoute).
Partner with security and infrastructure teams to investigate and remediate network-based incidents and improve detection capabilities.
Automate network security deployments and configurations using Infrastructure as Code (Terraform, scripting, APIs).