{"id":3683967,"url":"https://alion.io/job/swbc-senior-network-security-engineer","title":"Senior Network Security Engineer","company":{"id":1971330,"name":"SWBC","domain":"swbc.com","url":"https://alion.io/company/swbc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":89,"open_postings":12,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":64,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Antonio, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"CloudFormation","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"ISO 27001","optional":false},{"name":"OSPF","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-11-03T14:16:31Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-07T05:21:48Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.\nThe Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.\nWhy you’ll love this role:\nThis role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.\nEssential duties include the following:\nDesign, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.\nDeploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.\nDesign and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.\nPerform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.\nDevelop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.\nDesign, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.\nEstablish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.\nDesign, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.\nApply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.\nDesign and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.\nEvaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.\nConfigure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.\nServe as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.\nParticipate in the defined on-call rotation and support major technical escalations.\nSupport compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.\nOwn assigned network security platforms or major subsystems throughout their operational lifecycle.\nPlan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.\nCoordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.\nSupport disaster recovery planning and testing for assigned network security platforms and services.\nUse operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.\nMaintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.\nCollaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.\nMentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.\nCommunicate complex technical and security concepts effectively to technical and non-technical stakeholders.\nSupport Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.\nPerform all other duties as assigned.\nSerious candidates will possess the minimum qualifications:\nBachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.\nMinimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.\nExtensive experience designing, implementing, securing, and supporting enterprise network environments.\nExtensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.\nStrong experience with remote-access VPN and site-to-site IPsec VPN technologies.\nStrong understanding of enterprise routing concepts, including BGP and OSPF.\nHands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.\nStrong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.\nExperience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.\nDemonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.\nExperience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.\nKnowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.\nFamiliarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.\nWorking knowledge of security standards and control frameworks applicable to network and cloud security.\nStrong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.\nAbility to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.\nCurrent Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.\nAWS Certified Advanced Networking - Specialty, AWS Certified Solutions Architect - Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.\nExperience working in financial services or another regulated industry is preferred.\nSWBC offers*:\nCompetitive overall compensation package\nWork/Life balance \nEmployee engagement activities and recognition awards \nYears of Service awards\nCareer enhancement and growth opportunities \nLeadership Academy and Mentor Program\nContinuing education and career certifications \nVariety of healthcare coverage options\nTraditional and Roth 401(k) retirement plans \nLucrative Wellness Program\n*Based upon employee eligibility\nAdditional Information:\nSWBC is a Substance-Free Workplace and requires pre-employment drug testing.\nPlease note, SWBC does not hire tobacco users as allowed by law.\nTo learn more about SWBC, visit our website at www.SWBC.com. If interested, please click the appropriate apply button.","description_format":"text","description_chars":8387,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Property & Casualty Insurance","Mortgage Lending & Brokers","Insurance Brokers & Agencies"],"lifecycle":[{"event":"open","at":"2026-11-03T14:16:31Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":64,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/swbc-senior-network-security-engineer","json_url":"https://alion.io/job/swbc-senior-network-security-engineer.json","meta":{"generated_at":"2026-11-07T19:21:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29987,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1971330},"rest":"https://alion.io/mcp/rest/get_company?id=1971330"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fswbc-senior-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fswbc-senior-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fswbc-senior-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/swbc-senior-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fswbc-senior-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3683967}},{"tool":"search_jobs","arguments":{"company":"swbc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3683967},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}