{"id":3763868,"url":"https://alion.io/job/dfin-senior-network-security-engineer","title":"Senior Network Security Engineer","company":{"id":1809231,"name":"DFIN","domain":"dfinsolutions.com","url":"https://alion.io/company/dfinsolutions","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"Defense in Depth","optional":true}],"status":"live","first_seen_at":"2026-10-19T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-11-07T07:21:15Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Join a dynamic team at the pulse of global markets, where we deliver innovative software and service solutions for essential financial reporting and capital markets transactions. At DFIN, we are a values-driven organization that empowers you to build a fulfilling career while bringing your authentic self to work every day. Our “Win as One” mentality ensures that our team’s success is directly linked to Client, Shareholder and Employee Satisfaction.\nIn 2026, DFIN was named #1 on the 2026 Top 100 Global Most Loved Workplaces® by Best Practice Institute. We have also been recognized as one of America’s Most Loved Workplaces® for five consecutive years and a Built In Best Place to Work for six years, reflecting our continued commitment to supporting employees’ total well-being. Enjoy competitive compensation, a flexible workplace, comprehensive benefits, and opportunities for professional growth. Bring your passion and talents to DFIN - because being YOU thrives here.\nSummary:\nThe Senior Network Security Engineer provides advanced engineering expertise and technical leadership for enterprise network security across cloud and on-prem environments. This role leads complex designs and implementations, serves as a senior escalation point for major incidents, and drives modernization initiatives aligned to DFIN’s Zero Trust strategy. The senior engineer mentors other engineers, shapes standards, and partners with stakeholders to deliver secure, scalable, and resilient network security platforms.\nResponsibilities:\nArchitecture, Design & Roadmap Leadership\nLead the design of secure architectures for LAN/WAN, hybrid cloud, and SaaS environments; define reference patterns.\nOwn medium-to-large initiatives (e.g., segmentation, SASE expansions, firewall modernization) from design through delivery.\nContribute to multi-year roadmaps by identifying gaps, reducing technical debt, and aligning to Zero Trust outcomes.\nAdvanced Network Security Engineering\nEngineer and optimize advanced firewall/WAF capabilities, DDoS protections, API security patterns, and load balancing controls.\nDesign Azure connectivity and security controls at scale (hub/spoke, shared services, private connectivity, routing strategy).\nImplement and operationalize microsegmentation strategies and integrate with identity and endpoint signals.\nLead integrations with telemetry and NDR tools to improve detection fidelity and end-to-end visibility.\nOperational Excellence & Incident Leadership\nAct as Level 3 escalation for high-severity incidents; coordinate technical response and ensure timely mitigation.\nLead root-cause analysis, author post-incident reports, and drive systemic fixes and resilience improvements.\nEstablish and improve runbooks, operational metrics, and reliability practices for owned platforms; guide on-call readiness.\nAdditional Responsibilities\nDevSecOps & Automation (Technical Lead)\nDefine automation standards for network/security workflows; build reusable modules and guardrails for safe changes.\nPartner with platform engineering to embed secure connectivity controls into CI/CD and infrastructure-as-code pipelines.\nMentorship & Cross-Functional Leadership\nMentor engineers in architecture, troubleshooting, and secure design; provide technical reviews and guidance.\nInfluence stakeholders by presenting options, risks, and recommendations; partner with vendors to resolve complex issues.\nTechnology & Domain Exposure\nEnterprise firewalls (on-prem and cloud), WAF, DDoS protection, API security, and load balancing\nMicrosegmentation/segmentation design and enforcement; Zero Trust access patterns (ZTNA)\nSASE/SSE and SD-WAN architectures; identity-integrated access and policy strategies\nAzure network architecture at scale (hub/spoke, routing, private endpoints, shared services, resiliency patterns)\nTelemetry, logging, SIEM integrations, and NDR tool integrations to improve detection and response\nAdvanced automation/scripting (Python/PowerShell), CI/CD, and infrastructure-as-code practices\nQualifications:\nEducation & Experience\nBachelor’s degree in Computer Science, IT, or related field (preferred) or equivalent experience.\n7-10+ years of hands-on experience in network security engineering, including cloud networking and enterprise platforms.\nCertifications (Preferred/Highly Desired)\nCCNP/CCIE (Security or Enterprise) or equivalent experience.\nCloud networking/security certifications (Azure preferred; AWS/GCP a plus).\nSASE/SD-WAN certifications (e.g., Zscaler) are a plus.\nTechnical Skills\nDeep expertise in firewall/WAF policy architecture, routing, segmentation, and cloud networking controls.\nProven ability to lead complex troubleshooting and incident response for high-impact events.\nStrong understanding of Zero Trust, defense-in-depth, and secure-by-design principles.\nExperience designing operationally sustainable solutions (documentation, runbooks, lifecycle management, monitoring).\nSoft Skills\nAbility to communicate complex architecture and risk decisions to both technical and business stakeholders.\nDemonstrated leadership through mentorship, technical reviews, and influence across teams.\nHigh ownership, judgment, and ability to prioritize under pressure.\nIt is the policy of Donnelley Financial Solutions to select, place, and manage all its employees without discrimination based on race, color, national origin, gender, age, religion, actual or perceived disability, veteran status, actual or perceived sexual orientation, genetic information or any other protected status.\nIf you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access jobs.dfinsolutions.com as a result of your disability. You can request a reasonable accommodation by sending an email to .\nAt DFIN, protecting your identity is a top priority. Please be aware of scammers impersonating DFIN recruiters. DFIN recruiters will never request personal information via email or text. You will only receive a text from us if you've already been in contact. All automated messages will come from . If you ever have doubts about the legitimacy of any communication from us, please do not hesitate to reach out for verification via (this email is for general TA questions and is not used for updates on your application status). #BI-Remote","description_format":"text","description_chars":6488,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Accounting & Tax Software","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-11-04T19:24:51Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.82,"p_room":0.75,"age_days":19,"expected_fill_days":24,"reasons":["conf:3","win:late"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/dfin-senior-network-security-engineer","json_url":"https://alion.io/job/dfin-senior-network-security-engineer.json","meta":{"generated_at":"2026-11-07T09:16:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6992,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1809231},"rest":"https://alion.io/mcp/rest/get_company?id=1809231"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdfin-senior-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdfin-senior-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdfin-senior-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dfin-senior-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdfin-senior-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3763868}},{"tool":"search_jobs","arguments":{"company":"dfinsolutions.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3763868},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}