Senior Network Security Engineer

Overview

How you'll help us Keep Climbing (overview & key responsibilities)

As a Senior Network Security Engineer – IT Information Security (Grade
9), you will serve as a technical authority responsible for designing, securing, and evolving hybrid and cloud network security architecture. This role emphasizes macro- and micro-segmentation strategies, protection of east-west and north-south traffic flows, and securing highly adaptive, automation-driven environments while enabling speed to business.

You will partner with architecture, cloud engineering, application teams, and governance stakeholders to ensure security controls are scalable, resilient, and aligned with Zero Trust principles.

Delta’s IT Info Sec Network Security Team is responsible for:

• High performing and self-motivated, extensive professional experience in designing, implementing and managing network security solution, and in providing network support.
• IT support for network segmentation of infrastructure services.
• IT support to secure Internal, Partner, Vendor, and External connectivity to Delta and Tenant applications across multiple critical data center infrastructures.
• IT support for firewall hardware and software maintenance, which includes site implementations, inventories, infrastructure planning, preventative maintenance, and break/fix services in data center critical infrastructure.
• IT support for Enterprise Remote Access Users to align our client edge security technology with client-based agent on workstations; the team can utilize next-generation technology such as App
  - User- granular user identification.
• IT support for reverse proxy hardware and software maintenance, which includes site implementations, inventories, infrastructure planning, preventative maintenance, and break/fix services in data center critical infrastructure.
• IT support for airport operations mobile connectivity solution, Netmotion, hardware, and software maintenance, which includes site implementations, inventories, infrastructure planning, preventative maintenance, and break/fix services in data center critical infrastructure.
• Support IT Information Security Department to maintain the integrity and service continuity of the enterprise data and applications.
• Recommending and implementing departmental policy, guidelines, standards, and procedures.
• Assures compliance with all governing corporate standards and guidelines.
• Support Enterprise applications and Consumer services are available % SLA.

Key Responsibilities

• Lead design and implementation of macro-segmentation strategies across enterprise environments.
• Design and deploy micro-segmentation controls to secure east-west traffic.
• Secure north-south traffic using next-generation firewall and proxy technologies.
• Architect and secure AWS networking including VPCs, routing, Transit Gateway or Cloud WAN.
• Define segmentation policies balancing security, performance, and agility.
• Drive Zero Trust initiatives and identity-aware access.
• Implement automation and infrastructure-as-code for policy deployment.
• Provide senior technical leadership during incidents and migrations.
• Partner with application teams to understand traffic flows.
• Mentor junior engineers and act as escalation point.

• Advanced understanding of network security and segmentation.
• Hands-on experience with hybrid and AWS environments.
• Deep knowledge of AWS networking and security services.
• Experience supporting and managing a remote access SASE solution.
• Experience with next-generation firewalls.
• Strong troubleshooting and design skills.
• Excellent communication skills.
• Experience with Change Management / ITIL.
• Consistently prioritizes safety and security of self, others, and personal data.
• Embraces diverse people, thinking, and styles.
• Possesses a high school diploma, GED, or high school equivalency.
• Is at least 18 years of age and has authorization to work in the United States.

• 5–10+ years of enterprise or cloud network security experience.
• Leadership in segmentation initiatives.
• Zero Trust or micro-segmentation platform experience.
• Automation skills (AWS Lambda and…