Sr Network Security Engineer (Finance)

What you'll Do

• Design, implement, and manage Palo Alto Networks security solutions (Prisma Access, Next Generation FWs, Strata Cloud, GlobalProtect, Cortex XDR) to protect hybrid and cloud environments.
• Develop and enforce network segmentation policies, implementing role-based access control (RBAC) and least privilege across on-prem and cloud infrastructure.
• Configure and optimize GlobalProtect for secure, scalable remote access, ensuring compliance with security best practices and user accessibility requirements.
• Leverage Cortex XDR for advanced threat detection, incident response, and endpoint protection across the organization's IT assets.
• Implement security controls in public cloud environments (AWS, Azure, OCI), including network security groups, identity and access management (IAM), encryption, and multi-factor authentication (MFA).
• Ensure compliance with security frameworks (e.g., NIST, CIS, ISO 27001) through the implementation of appropriate cloud security policies and procedures.
• Collaborate with cloud architects and DevOps teams to integrate security controls into cloud-native applications and services, ensuring secure CI/CD pipelines.
• Monitor and manage security incidents and vulnerabilities within both on-prem and cloud environments, using Palo Alto's suite of tools and cloud-native monitoring services.
• Perform security risk assessments and audits of cloud and network infrastructures, providing recommendations for continuous improvement.
• Document security architectures, policies, and procedures, ensuring they align with industry best practices and regulatory requirements.
• Mentor and guide junior security engineers in Palo Alto Networks and cloud security technologies.
• Knowledge of variety of routing protocols
• Utilizes Subject Matter Expert knowledge in leading daily management and administration of network security controls such as firewalls, web application firewalls, DNS, routers, switches, VPN appliances, and load balancers
• Utilizes an advanced and broad range of skills to identify and troubleshoot different technical platforms including firewalls, servers, networks, Internet and Cloud
• Creates and maintains knowledge base to aid troubleshooting used by support teams
• Evaluates existing processes and policies and recommends enhancements to protect data and information from unauthorized access
• Build and assist with daily requests of changes to firewall policies

What Experience and Education You Need

• Bachelor's degree in information security, Computer Science, or a related field.
• Industry certifications such as PCNSE, PCNSA, PCCSE, CISSP, AWS Certified Security, or Azure Security Engineer are highly desirable.
• Applicable industry certifications include those from Cisco, Palo Alto Networks, AWS, GIAC, etc.
• 5-7 years of experience in security engineering, with hands-on expertise in Palo Alto Networks platforms (Prisma Access, Strata Cloud, GlobalProtect, Cortex XDR).
• Proven experience implementing network segmentation and security principles like least privilege in complex enterprise environments.
• Significant experience securing public cloud environments (AWS, Azure, OCI) with practical knowledge of cloud security controls, IAM policies, and network security configurations.
• Hands-on experience managing next-generation firewalls, VPNs, and cloud security configurations.
• Demonstrated ability to design and implement secure cloud architectures in alignment with industry standards and regulatory frameworks.
• Experience designing and administering an enterprise network that supports multiple physical and cloud data centers

What Could Set You Apart

• Expertise in Palo Alto Networks technologies, including cloud-delivered security services and endpoint protection.
• Strong understanding of cloud security controls such as network security groups, IAM, VPCs, security auditing, encryption, and logging in AWS, Azure, GCP and OCI.
• In-depth knowledge of network protocols, routing, switching, and firewall configuration.
• Proficiency in security frameworks (e.g., NIST, CIS, ISO 27001) and their application to both on-prem and cloud environments.
• Experience with automation and security integration into DevOps workflows and CI/CD pipelines.
• Strong analytical and problem-solving skills, with a proactive approach to identifying and addressing security risks.
• Excellent communication and collaboration skills, capable of working with technical and non-technical teams.
• Detail-oriented with a focus on designing and enforcing robust security architectures that meet business needs and regulatory requirements.

Physical Requirements

• Must be able to work in spaces with 55 inches of headroom
• Must be able to tolerate working environment with inside controlled temperatures varying from 32 degrees Fahrenheit to minus 45 degrees Fahrenheit, as well as outside ambient temperatures (including heat, cold and precipitation)
• Must tolerate heights up to 30 ft. and be able to access elevated products from inside safety cage
• May stand to rebuild pallets with products. Requires tolerance of standing posture up to 5 hours, over an 8-10-12 hour shift. Occasionally required to walk; climb or balance and stoop, kneel, crouch, or crawl.
• Must be able lift boxes of varying weights from 10 lbs. up to 55 lbs. from ground level to 80 inches in height and up 70 lbs. to 50 inches in height rebuilding pallets without assistance. Must be able to lift and carry product a distance of 6 ft. without mechanical assistance
• Wear clothing , boots , headgear and gloves that protect against the cold.
• Must be able to use hands and fingers to handle or feel; reach with hands and arms; talk or hear.
• Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and ability to adjust focus.
• Ability to maintain reasonably regular and punctual attendance consistent with ADA, FMLA and other federal, state and local standards/requirements.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. The Company makes reasonable accommodations in accordance with applicable law.

Americold is an Equal Opportunity/Affirmative Action Employer and complies with applicable employment laws.

EOE/AA M/F/D/V DFW.

ABOUT US

Americold is a global provider of temperature-controlled infrastructure. We partner with farmers and food producers to ensure their perishable and frozen product reaches foods suppliers, restaurants, and your local grocery store without spoilage. Our customers, which include some of the most respected brands in the food industry, rely on our expertise and commitment to safety in order to deliver on their commitments.