Senior Network Security Engineer

About the role

As a Senior Network Security Engineer at Crypto.com, you will be responsible for resolving complex network infrastructure issues and optimizing security configurations across both on-premise data centers and AWS environments. Your expertise will ensure the integrity of the network through effective management of firewalls and other security technologies.

You will work in a hybrid environment, bridging the gap between development and operations by implementing Infrastructure as Code practices. Success in this role means effectively automating network deployments and improving operational efficiency while contributing to a culture that values security and innovation.

The salary range for this position is between $75,000 and $125,000, reflecting the seniority and expertise required.

Skills that matter here

• network security: You will utilize your network security expertise to manage and optimize firewalls and protect core endpoints.
• AWS: Experience with AWS is essential for managing cloud networking and ensuring secure configurations.
• FortiGate: You will be responsible for configuring and maintaining FortiGate Firewalls in both on-prem and AWS environments.
• Cisco ASA: Your role includes managing Cisco ASA Firewalls to enhance network security.
• Infrastructure as Code: You will embrace Infrastructure as Code to automate network deployments and security workflows.
• network automation: This role involves leveraging automation tools to improve operational efficiency in network tasks.

Who this role suits

• You have a strong technical background in network security and cloud environments.
• You can work independently and prioritize tasks effectively, especially during operational issues.
• You communicate clearly and effectively, particularly in high-pressure situations.
• You are proactive in seeking improvements through automation and innovative solutions.

From the employer

Responsibilities:

• Act as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments.
• Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints.
• Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP).
• Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs.
• Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows.
• Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency.
• Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies.

Requirements:

• Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience.
• Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environments.
• Experience with firewall configuration, routing, switching, network security, and incident response.
• Working knowledge of relevant networking protocols, including BGP, OSPF, IPsec, HSRP, and QoS.
• Experience with hybrid-cloud networking, including AWS VPC networking and AWS Direct Connect.
• Ability to work independently, prioritize incidents effectively, and communicate clearly during operational issues.

Preferred qualifications:

• Experience with one or more of the following security and edge technologies: FortiGate, Cisco ASA, Akamai WAF, or anti-DDoS solutions.
• Experience with one or more of the following infrastructure technologies: Arista switches, Cisco routers, F5 LTM/GTM, or Infoblox DNS/DHCP.
• CCNP, CCIE, AWS Certified Advanced Networking, CISSP, or equivalent practical experience.
• Experience with Infrastructure as Code and network automation.
• Experience with security-orchestration or workflow-automation tools such as Tines, n8n, or Dify.
• Experience executing or supporting live data-center-to-AWS migration cutovers.

Benefits:

• Competitive salary
• Attractive annual leave entitlement including: birthday, work anniversary
• 401(k) plan with employer match
• Eligible for company-sponsored group health, dental, vision, and life/disability insurance
• Work Flexibility Adoption. Flexi-work hour and hybrid set-up
• Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope.