Sr. Network Security Engineer (Hybrid - Seattle, WA)

Job DescriptionAre you passionate about securing the infrastructure that powers one of retail's most iconic brands? Nordstrom is on a journey to modernize and fortify the systems that connect our employees, partners, and customers across 400+ locations and multi-cloud environments. To support that mission, we are hiring a Senior Network Security Engineer to join our NIO organization.You will be part of a team of highly skilled security and infrastructure professionals responsible for designing, operating, and automating the network security controls that protect Nordstrom's enterprise. The ideal candidate thinks in automation first, understands how networks actually work, and brings deep expertise in cloud security, identity, and access. You will partner closely with engineers, architects, and platform teams to execute on both strategic and day-to-day security goals.A Day in the LifeDesign, deploy, and operate network security controls across enterprise, cloud (AWS, Azure, GCP), and retail edge environmentsImplement and maintain zero-trust network access (ZTNA) policies, microsegmentation, and perimeter security using tools like Zscaler, Palo Alto Networks, and cloud-native NGFWsBuild and maintain automation pipelines for security policy management, firewall rule lifecycle, and compliance validation — treating infrastructure as codeCollaborate with cloud, platform, and application teams to integrate security at the network layer without blocking delivery velocityServe as a subject matter expert for authentication and authorization frameworks: 802.1X, EAP-TLS, RADIUS/ClearPass, certificate management, and IAM integrationsMonitor, triage, and respond to network security events; drive root cause analysis and long-term remediationAuthor engineering documentation, threat models, and security runbooks; contribute to architecture reviewsMentor engineers across the NIO organization on security best practices and automation patternsParticipate in on-call rotation for critical security infrastructureMore About YouYou approach every problem with an automation-first mindset — if you're doing something twice, you're already writing the scriptYou understand the network well enough to implement security without needing a network engineer in the room — you can read a routing table, troubleshoot a VLAN, and reason about traffic flowsYou've operated security in cloud environments and understand how AWS Security Groups, Azure NSGs, cloud NGFW, and service mesh fit into a layered defense modelAuthentication and authorization are not just checkboxes to you — you have strong opinions about certificate lifecycles, EAP methods, and identity-aware policy enforcementYou communicate clearly with both engineers and executives, translating complex security posture into business riskYou thrive in ambiguity, work with urgency during incidents, and bring calm, structured thinking under pressurePassionate about continuous improvement and raising the security bar across teams you work withQualificationsBachelor's or master's degree in Computer Science, Engineering, Cybersecurity, or equivalent education and experience7+ years of progressive enterprise security engineering experience with demonstrated depth in network security domainsHands-on experience with cloud security architecture across two or more major cloud platforms (AWS, Azure, GCP, OCI) — including cloud NGFW, VPC security controls, and private connectivity patternsStrong automation and IaC experience: Python, Terraform, Ansible, or equivalent — you write production-grade automation, not one-off scriptsDeep expertise in network security technologies: next-gen firewalls (Palo Alto), ZTNA/SWG (Zscaler), IDS/IPS, and DDoS mitigationStrong working knowledge of authentication and authorization: 802.1X, EAP-TLS, RADIUS, ClearPass/ISE, SAML, OAuth, and PKI/certificate managementSolid foundational network knowledge: TCP/IP, BGP, SD-WAN concepts, VLAN segmentation, DNS, and routing protocols — enough to own security outcomes independentlyExperience with security policy-as-code, CI/CD pipelines for network security changes, and GitOps workflowsEffective written and verbal communication; able to produce clear RCAs, architecture docs, and executive summariesNice to HaveExperience with Versa SD-WAN security policy, Juniper Mist access policy, or Fastly/edge security controlsFamiliarity with SIEM platforms, SOAR workflows, or security data pipelines (e.g., New Relic, Splunk)Relevant certifications: PCNSE, CCNP Security, AWS/Azure Security Specialty, CISSP, or equivalentRetail or high-velocity e-commerce security experiencePay Range DetailsThe pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations. Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.$142,000.00 - $220,500.00 AnnualWe’ve got you covered…Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:Medical/Vision, Dental, Retirement and Paid Time AwayLife Insurance and DisabilityMerchandise Discount and EAP ResourcesThis position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: few more important points...The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site. Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at . Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.Nordstrom keeps job postings open for at least one day after the posting date. 2026 Nordstrom, IncSummaryLocation: Seattle, WAType: Full time