Principal Network Security Engineer

Principal Network Security Engineer

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Role: Principal Network Security Engineer

Description of role and key responsibilities:

Reporting to the Director of Network Application Engineering, the Principal Network Security Engineer is seen as a technical expert in networking security. This is a technical, team lead, and hands-on role, with a primary focus on design and implementation of network security change; although you will be expected to support the network security operations team with complex troubleshooting of issues as required. You will have experience of working in high impact, mission critical environments, where service matters, and exceeding expectations is the norm. You have led critical projects, thrive in critical problem solving, and enjoy leading a team working on projects.

Key responsibilities:

1. Defining and documenting Network Security Standards
2. Creation of Low Level Design documents to meet requirements outlined in the High Level Design
3. Creation of detailed Implementation Plans for all engineering related activity
4. Procurement activities relating to build and delivery of new services (Project)
5. Ensuring the smooth Transition/Handover to Operations in line with agreed Operational Acceptance Process
6. Managing Technical Lifecycle Management for all Network & Communications services
7. Supporting Architecture in creation and upkeep of a Delivery Roadmap for Network Security
8. Supporting the Architecture in scoping activities required to produce the High Level Design
9. Supporting Architecture in undertaking Proof of Concept activities
10. Ensuring skillsets are relevant and up to date in order to deliver change and provide a high level of support
11. Providing escalation support to Operations with complex troubleshooting of Major Incidents as required
12. Provide on-call escalation support (rota basis) and work extended hours when required

Core Skills & Experience:

1. A minimum 10+ years of hands-on experience of network security solutions within a global enterprise scale organization (5,000-50,000 users) with both traditional datacenters and Cloud.
2. Considerable first-hand experience of design engineering and building resilient and scalable security solutions, ideally within finance or investment banking.
3. Cybersecurity principles, global financial services business models, as well as regional compliance standards, relevant local regulations, and applicable laws.
4. The concepts of risk and compliance and how to translate these into effective security solutions.
5. Appreciation of automation and orchestration and will have experience of scripting against an API.
6. Strong understanding of Layer 2, Layer 3 & Layer 4-7 network and security technologies.
7. Familiar with a variety of testing tools, networking technologies and techniques to accurately troubleshoot and resolve complex technical problems associated with the service, application and network hardware and software.

Technical Skills & Experience:

You will have expert knowledge and experience in several of the following areas:

1. NGFW platforms and management tools such as Tufin
2. Network Access Control in enterprise environments
3. Application Delivery & Load balancers
4. Public and Private cloud security
5. Workflow automation
6. Routing and switching
7. WAN Optimization
8. DNS, IPAM and DHCP

It is desirable and advantageous to also have knowledge and experience of the following technology platforms:

1. Check Point, Fortinet, Tufin
2. Forescout, Cisco ISE
3. F5, Netscaler
4. Infoblox
5. Microsoft Active Directory, CyberArk
6. Azure log analytics
7. Akamai CDN
8. Illumio
9. Zscaler
10. Python
11. Ansible, Terraform
12. Azure and AWS native firewall and load balancing

Technical Certification:

It is desirable and advantageous to have the following certification or demonstrable working experience:

1. Check Point CSSE
2. CISSP
3. ITILv3 foundation or higher
4. Zscaler fundamentals certification, advanced preferred
5. F5

Personal Attributes:

1. Highly organized and have proven ability to operate well under pressure, working to tight deadlines.
2. Have good problem management and customer service skills.
3. A positive attitude and be capable of remaining positive even when under immense pressure.
4. Able to work with global teams to deliver projects, often at pace and under challenging circumstances.
5. High professional standards, who never accepts the status-quo; who challenges why things are done the way they are.
6. Strong communicator, both written and verbal.
7. Discourage hero culture and ensure the team always comes before the individual, although always ensuring for the welfare of staff at all times.
8. Always act with integrity and embrace the philosophy of treating our customers fairly (compulsory).
9. Work effectively as one IT community across the regions and the business.
10. Embrace the philosophy and principles of group IT.
11. Understand and apply Northern Trust’s working practices, policies and procedures.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

Reasonable accommodation:

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at

We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people. Apply today and talk to us about your flexible working requirements and together we can achieve greater.