Senior Network Engineer | 1167

About This Opportunity CTI Staffing is partnering with a large, well-established retail organization to find a Senior Network Security Engineer for their enterprise security team in a hybrid role based in Chicago, IL or central North Carolina. This team protects a large, distributed network and the applications and data that run on it.

You'll own how firewall policy is governed and changed, and you'll build the automation that makes those changes faster and safer.

What You'll Do

Design, implement, and maintain secure network infrastructure and controls across enterprise environments Administer and support Tufin Secure. Track and Secure. Change Lead firewall policy governance, including rule reviews, recertifications, and compliance reporting Build automated workflows for firewall policy and change management Integrate Tufin with Service.

Now and other ITSM platforms Manage firewalls, IDS/IPS, VPNs, WAF, and NAC solutions Support incident response and security assessments, and help with vulnerability management Partner with cloud, infrastructure, and cybersecurity teams on segmentation and Zero Trust initiatives Mentor teammates and maintain security documentation and standards Requirements What You Bring Must-Have: Strong hands-on experience with Tufin Secure.

Track and Secure. Change Experience managing firewall policy on platforms such as Palo Alto, Check Point, Fortinet, or Cisco Firepower Experience with firewall governance, policy optimization, and change management Working knowledge of network security automation and workflow orchestration Experience with Service. Now integrations and security change workflows Solid grasp of TCP/IP, routing, switching, DNS, and DHCP Experience securing a cloud platform (Azure, AWS, or GCP) Ability to work onsite 2 days per week in Chicago, IL or central North Carolina Nice-to-Have: 3 to 5+ years of Tufin administration and engineering Experience in large, regulated enterprise environments Scripting or automation with Python, Power.

Shell, Ansible, Terraform, or REST APIs Familiarity with NIST, CIS, ISO 27001, and PCI-DSS Certifications such as CISSP, CCNP Security, PCNSE, Tufin Certified Administrator, or Fortinet NSE Technical Environment: Tufin Secure. Track and Secure. Change, Service. Now, Palo Alto, Check Point, Fortinet, Cisco Firepower, Azure/AWS/GCP, Python, Ansible, Terraform What Success Looks Like: Stronger firewall governance and cleaner audit results More of the change management process automated Reliable security infrastructure and quick, effective incident response