Avangrid

Senior Network Security Engineer

LocationOrange, CT
Job Typefull_time

About This Job

Job Title: Senior Network Security Engineer Department: Information Technology

Reports to: Director - Network Technology

Location: In Office

, Orange CT

The base salary range for this position is dependent upon experience and location, ranging from: $114,332.80 - $142,916

Job Summary

We are seeking a highly skilled Senior Network Security Engineer to join our team and play a key role in securing, optimizing, and transforming our enterprise network infrastructure. The ideal candidate will have deep expertise in firewall security, NAT, IPSEC, SD-WAN, routing protocols (EIGRP, BGP, OSPF), and cloud security solutions. This position will focus on managing and enhancing our security infrastructure, which includes:

Cisco ASA, Checkpoint, Fortinet FortiGate, Palo Alto Firewalls.

Radware for DDoS protection.
Zscaler ZIA/ZPA for cloud security.
SD-WAN for optimized global connectivity.
EIGRP, BGP, and OSPF-based network routing.
NAT policy design and implementation

A key initiative for this role is leading the migration from Checkpoint to Fortinet firewalls while ensuring seamless network security operations. Additionally, the engineer will support and enhance our SD-WAN deployment for optimized global connectivity and application performance.

Key Responsibilities

Lead the migration from Checkpoint to Fortinet, including policy conversion, rule optimization, and traffic validation.
Manage and maintain Cisco ASA, Palo Alto, Fortinet, and Checkpoint firewalls across corporate, cloud, and remote sites.
Design and optimize firewall rule sets for improved security, performance, and compliance.
Perform risk assessments and firewall audits to ensure network security best practices.
Manage and optimize SD-WAN architecture to improve application performance and reduce latency.
Implement policy-based traffic steering, failover mechanisms, and WAN optimization.
Ensure seamless integration between SD-WAN, firewalls, cloud security solutions, and on-prem networks.
Troubleshoot SD-WAN performance issues, routing conflicts, and connectivity problems.
Work with network and security engineers to ensure secure connectivity between on-premises, branch locations, and cloud.
Design and implement NAT policies, including static NAT, dynamic NAT, and PAT (Port Address Translation).
Configure and troubleshoot EIGRP, BGP, and OSPF for enterprise and cloud routing.
Optimize routing policies to ensure high availability, redundancy, and performance.
Work closely with the network engineering team to enhance SD-WAN, inter-site, and cloud connectivity.
Administer and optimize Zscaler ZIA/ZPA solutions for secure cloud access and web filtering.
Implement zero-trust security policies for cloud applications and remote users.
Troubleshoot Zscaler tunnels, proxy configurations, and application access issues.
Implement and maintain Radware DDoS protection to safeguard network infrastructure from volumetric and application-layer attacks.
Configure IPS/IDS solutions to detect and mitigate security threats.
Work with SOC teams to analyze and respond to security incidents.
Lead firewall, SD-WAN, NAT, and routing issue troubleshooting affecting business-critical applications.
Perform packet capture analysis and use security logs to diagnose network issues.
Work with vendors (Cisco, Fortinet, Palo Alto, Zscaler) to resolve complex technical issues.
Develop and enforce firewall and network security policies in compliance with NIST, CIS benchmarks, and ISO 27001 standards.
Conduct regular security audits and risk assessments.
Maintain up-to-date documentation of firewall rules, SD-WAN policies, and security configurations.
Develop scripts (Python, Bash, PowerShell) for automating firewall audits and SD-WAN policy updates.
Optimize firewall and SD-WAN policies to reduce latency and improve efficiency.
Implement network automation frameworks to streamline security operations.


Required Skills & Experience

5-8 years of experience in network security engineering.
Expertise in Fortinet FortiGate, Checkpoint, Palo Alto, and Cisco ASA firewalls.
Strong knowledge of SD-WAN solutions (Fortinet SD-WAN, Cisco SD-WAN, Prisma Access).
Experience configuring and troubleshooting EIGRP, BGP, and OSPF routing protocols.
Hands-on experience managing Zscaler ZIA/ZPA for cloud security.
Proficiency in VPN technologies (IPSec, SSL, GRE, DMVPN, L2TP) and their security implications.
Strong skills in NAT, firewall rule optimization, and routing table analysis.
Experience with Radware DDoS protection, IPS/IDS, and threat mitigation.
Knowledge of zero-trust security architectures and secure SD-WAN implementation.
Strong analytical skills for troubleshooting network security issues, including packet captures and firewall logs.


Preferred Qualifications

Certifications: Fortinet NSE 4/7, Checkpoint CCSA/CCSE, Palo Alto PCNSA/PCNSE, Cisco CCNP Security, Zscaler ZCCP, SD-WAN certifications.
Experience with AWS, Azure, and GCP cloud security best practices.
Familiarity with SIEM solutions for security event monitoring.
Experience automating security tasks using Python, Ansible, or Terraform.

Company

AVANGRID MANAGEMENT COMPANY, LLC.

Mobility Information

Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.

At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law.

If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at careers@avangrid.com.

Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions. This does not include those that will work for Avangrid Power.

Job Posting End Date

June-9-2025

Similar Jobs

company-logo

Electrical Engineer

logo
Dudley Staffing
Job TypeFull-time
Salary
$55 - $75
Canonsburg, Pennsylvania
4 months ago
company-logo

Senior Network Security Engineer

Avangrid
Job Typefull_time
 
Orange, CT
3 days ago
company-logo

Senior Security Engineer

Runwise
Salary
$140000 - $200000
New York, NY
13 days ago
company-logo

Senior Network Engineer

Canary Systems Inc.
Job TypeFull-time
 
New London, NH
4 days ago
company-logo

Senior Network Engineer

One Power Company
Job TypeFull-time
Salary
$125000 - $150000
Findlay, OH
21 days ago
company-logo

Senior IT Security Engineer

Freeport-McMoRan
Salary
$113000 - $158000
Phoenix, AZ
4 days ago
company-logo

Network Security Engineer

Leeward Renewable Energy
Job Typefull_time
 
Dallas, TX
17 days ago
company-logo

IT Senior Security Engineer

DTE Energy
 
Detroit, MI
5 days ago
company-logo

Network Engineer, Senior

Engie
Job TypeFull-time
Salary
$84000 - $128800
Houston, TX
19 days ago
company-logo

Senior Cybersecurity Engineer

NextEra Energy
Job TypeFull-time
 
Juno Beach, FL
29 days ago
company-logo

Senior Cybersecurity Risk Engineer

WillScot
 
Phoenix, AZ
28 days ago
company-logo

Senior IT Security Specialist

NYISO
Job Typefull_time
 
Rensselaer, NY
20 days ago
company-logo

Senior Operations Engineer

Summit Midstream Partners, LP
Job TypeFull-time
 
Houston, TX
8 days ago
company-logo

Senior Operations Engineer

ARC Resources Ltd.
Job Typefull_time
 
Grande Prairie, AB
17 days ago
company-logo

Senior Operations Engineer

Summit Midstream Corporation
Job Typefull_time
 
Houston, TX
19 days ago
company-logo

Senior Protection Engineer

Pacific Gas and Electric
Job TypeFull-time
Salary
$153828 - $207504
Fresno, CA
27 days ago
company-logo

Senior Systems Engineer

Copeland
Job Typefull_time
 
Sidney, OH
6 days ago
company-logo

Senior Cyber Security Analyst

DC Water
Job Typefull_time
Salary
$125000 - $136000
Washington, DC
7 days ago
company-logo

Senior Electronic Engineer

Quaise Energy
Job Typefull_time
Salary
$130000 - $150000
Houston, TX
14 days ago
company-logo

Senior Infrastructure Engineer

MISO
Job TypeFull-time
Salary
$150000 - $171000
Carmel, IN
18 days ago

Trending Jobs

company-logo

Assistant General Manager, Navy Yard Electric Utility

Job TypeFull-time
Salary
$108000 - $108000
Philadelphia, Pennsylvania
about 1 month ago
company-logo

Electrical Engineer

Dudley Staffing
Job TypeFull-time
Salary
$55 - $75
Canonsburg, Pennsylvania
4 months ago
company-logo

Division Order Analyst

Job TypeFull-time
 
Dallas, Texas
25 days ago
company-logo

Accounts Payable Clerk

Job TypeFull-time
Salary
$65000 - $65000
Dallas, Texas
about 1 month ago
company-logo

contract landman

HPS Oil & Gas Properties
Job TypeFull-time
 
Lafayette, Louisiana
3 months ago
company-logo

Oil and Gas Land and Title Analyst - SAM Associate II

Bank of America
Job TypeFull-time
 
Dallas, Texas
about 2 months ago
company-logo

Attorney

Toeppich & Associates
Job TypeFull-time
 
Houston, Texas
about 1 year ago
company-logo

Senior Landman

Greenlake Energy
Job TypeFull-time
 
Austin, Texas
about 2 months ago
company-logo

Contracts Administrator

Third Coast
Job TypeFull-time
Salary
$70000 - $85000
Houston, Texas
about 1 month ago
company-logo

Foundry Professionals

Penticton Foundry
Job TypeFull-time
 
British Columbia, Canada
27 days ago
company-logo

Electrical Designer

Dudley Staffing
Job TypeFull-time
Salary
$45 - $60
Canonsburg, Pennsylvania
4 months ago
company-logo

Title Landman

Sustain Land Services
Job TypeFull-time
 
Norman, Oklahoma
2 months ago
company-logo

Deckhand

Ballard Marine Construction
Job TypeFull-time
 
Bradenton, FL
29 days ago
company-logo

Landman

Stockyards Energy Land Services
Job TypeContract
 
Akiachak, Texas
5 months ago
company-logo

Apprentice Lineman

N Line Electric
Job TypeFull-time
Salary
$68640 - $106080
Longmont, CO
22 days ago
company-logo

HSE Operations Manager

ProPetro Services, Inc
Job Typefull_time
 
Midland, TX
11 days ago
company-logo

Senior Division Order Analyst

Formentera
Job TypeFull-time
Salary
$110000 - $130000
Austin, Texas
about 1 year ago
company-logo

Mechanical/Piping Engineer

Dudley Staffing
Job TypeFull-time
Salary
$55 - $75
Canonsburg, Pennsylvania
4 months ago
company-logo

Title Reviewer

Innovation Land Services
Job TypeFull-time
 
Pittsburgh, Pennsylvania
4 months ago
company-logo

Lease Records Administrator

WEM Operating
Job TypeFull-time
 
Provo, Utah
2 months ago