Senior Network Engineer | 1167

About This Opportunity

CTI Staffing is partnering with a large, well-established retail organization to find a Senior Network Security Engineer for their enterprise security team in a hybrid role based in Chicago, IL or central North Carolina.

This team protects a large, distributed network and the applications and data that run on it. You'll own how firewall policy is governed and changed, and you'll build the automation that makes those changes faster and safer.

What You'll Do

• Design, implement, and maintain secure network infrastructure and controls across enterprise environments
  
• Administer and support Tufin SecureTrack and SecureChange
  
• Lead firewall policy governance, including rule reviews, recertifications, and compliance reporting
  
• Build automated workflows for firewall policy and change management
  
• Integrate Tufin with ServiceNow and other ITSM platforms
  
• Manage firewalls, IDS/IPS, VPNs, WAF, and NAC solutions
  
• Support incident response and security assessments, and help with vulnerability management
  
• Partner with cloud, infrastructure, and cybersecurity teams on segmentation and Zero Trust initiatives
  
• Mentor teammates and maintain security documentation and standards
  

Requirements

What You Bring

Must-Have:

• Strong hands-on experience with Tufin SecureTrack and SecureChange
  
• Experience managing firewall policy on platforms such as Palo Alto, Check Point, Fortinet, or Cisco Firepower
  
• Experience with firewall governance, policy optimization, and change management
  
• Working knowledge of network security automation and workflow orchestration
  
• Experience with ServiceNow integrations and security change workflows
  
• Solid grasp of TCP/IP, routing, switching, DNS, and DHCP
  
• Experience securing a cloud platform (Azure, AWS, or GCP)
  
• Ability to work onsite 2 days per week in Chicago, IL or central North Carolina
  

Nice-to-Have:

• 3 to 5+ years of Tufin administration and engineering
  
• Experience in large, regulated enterprise environments
  
• Scripting or automation with Python, PowerShell, Ansible, Terraform, or REST APIs
  
• Familiarity with NIST, CIS, ISO 27001, and PCI-DSS
  
• Certifications such as CISSP, CCNP Security, PCNSE, Tufin Certified Administrator, or Fortinet NSE
  

Technical Environment: Tufin SecureTrack and SecureChange, ServiceNow, Palo Alto, Check Point, Fortinet, Cisco Firepower, Azure/AWS/GCP, Python, Ansible, Terraform

What Success Looks Like:

• Stronger firewall governance and cleaner audit results
  
• More of the change management process automated
  
• Reliable security infrastructure and quick, effective incident response