Principal Network Security Engineer

Experience

• Bachelor’s degree in Computer Science, Information Security, or related field;
  Master’s degree preferred.
• Relevant certifications such as CISSP, CCNP Security, AWS/Azure Security, or equivalent.
• 10+ years of experience in network security engineering or architecture roles, including hands‑on management of firewalls, IDS/IPS, proxy, segmentation, and access controls.
• Demonstrated experience with Dev Ops practices, CI/CD, configuration management tools (e.g., Ansible, Terraform), and Infrastructure as Code.
• Thorough understanding of risk management, regulatory compliance, and incident response procedures.

• 8+ years’ experience leading engineering teams, with a strong track record building high‑performance, collaborative cultures
• Deep experience in network security domains, including Network Access Control, Zero Trust Network Access, network segmentation, firewalls, and IDS/IPS
• Strong networking fundamentals (routing and switching)
• Experience deploying Infrastructure as Code via CI/CD pipelines
• Proven vendor and service‑provider management
• Experience executing network infrastructure audits and supporting responses to security incidents

• Network Security Domain Leadership
  :
  Deep experience leading and shaping network security solutions across Network Access Control, Zero Trust Network Access, network segmentation, network firewalls, and intrusion detection and prevention technologies.
• Senior Engineering Leadership & Delivery: 8+ years’ experience leading engineering teams, fostering a high-performance culture, and delivering complex initiatives aligned to organisational objectives.
• Advanced Networking Fundamentals: Strong technical foundation in enterprise networking, including routing and switching, enabling secure and scalable network designs.
• Automation & Modern Engineering Practices
  :
  Proven experience deploying Infrastructure as Code using CI/CD pipelines and configuration management to improve reliability, speed, and control.
• Risk, Audit & Vendor Management
  :
  Experience executing network infrastructure audits, identifying and assessing vulnerabilities, supporting responses to security incidents, and managing technology vendors and service providers in line with standards and contracts.

• Hybrid & Cloud Connectivity:
  Experience integrating enterprise networks with AWS and/or Azure.

Salary / Rate Minimum: $220,000

Salary / Rate Maximum: $300,000

The minimum and maximum salary/rate information above includes only base salary or base hourly rate. It does not include any another type of compensation or benefits that may be available.

Barclays employees are eligible for a suite of a competitive and generous employee benefits, including medical, dental and vision coverage, 401(k), life insurance, and other paid leave for qualifying circumstances.

This position is eligible for an incentive award.

• The Network Security Principal Engineer is responsible for designing, implementing, and overseeing advanced network security controls to protect organizational assets against evolving threats. This role manages perimeter security products including firewalls, intrusion detection systems, proxy, remote access as well as network access control (NAC) and network segmentation solutions. The Network Security Lead enforces network security policies, standards, and baselines, and drives automation initiatives including deploying Infrastructure as Code via CI/CD pipeline and configuration management.
  
  The position partners closely with infrastructure, cloud, and cybersecurity teams, execute high-impact network changes, and manage risk and compliance activities.
• You will join Barclays at a pivotal moment in our Networks Modernization journey, playing a critical role in shaping and delivering the transformation of our strategic network security platforms and connectivity services, embedding security‑by‑design and zero‑trust principles across the network estate.
• Production Network Engineering is a new, mission‑aligned operating model within the Network Product Design and Engineering domain. This domain is responsible for the design, build, and run of the underlying…