Senior Network Security Engineer

Senior Network Security Engineer

We are seeking an experienced Senior Network Security Engineer to implement, secure, and support the agency's enterprise network, cloud, and computing infrastructure. This position plays a critical role in protecting a hybrid enterprise environment spanning approximately 300 statewide locations while ensuring the confidentiality, integrity, and availability of mission-critical systems and public-facing applications. The successful candidate will collaborate closely with Infrastructure, Cloud Engineering, and the Information Security Office to strengthen VDOT's cybersecurity posture across on-premises and Azure environments.

The Senior Network Security Engineer is responsible for securing, designing, documenting, researching, implementing, and supporting VDOT's enterprise network and computing infrastructure. This role supports a large-scale hybrid environment that includes Palo Alto firewalls, Azure networking, ExpressRoute connectivity, Web Application Firewalls (WAF), Splunk SIEM, SD-WAN technologies, and mission-critical public-facing applications. The engineer will lead security initiatives, respond to incidents, perform proactive threat hunting, and ensure network security architecture aligns with agency standards and best practices.

• Design, implement, and maintain secure network architectures across on-premises and Microsoft Azure environments.
• Ensure network security architecture complies with operational security standards before and after deployment.
• Lead investigations, containment, and resolution of network security incidents.
• Review firewall rule requests and validate compliance with established security standards.
• Monitor security events using SIEM platforms and coordinate incident response activities.
• Conduct proactive threat hunting and anomaly detection across enterprise environments.
• Perform network security assessments and recommend remediation strategies.
• Identify, prioritize, and remediate network security vulnerabilities.
• Support penetration testing initiatives and remediation efforts.
• Validate Web Application Firewall (WAF) and firewall placement, integration, and connectivity.
• Lead implementation, review, and ongoing management of agency WAF solutions.
• Diagnose security threats using system logs, SIEM platforms, diagnostic tools, monitoring utilities, and test equipment.

• Develop and maintain network security standards and operational documentation.
• Produce and maintain network architecture diagrams, IP addressing schemes, firewall rule documentation, and access control records.
• Ensure documentation accurately reflects enterprise security configurations and operational procedures.

• Partner with Infrastructure, Cloud Engineering, and Information Security teams to maintain secure enterprise operations.
• Communicate technical issues effectively to both technical teams and executive leadership.
• Mentor junior engineers and provide technical guidance on security best practices.

• Support a hybrid enterprise environment consisting of approximately 300 statewide locations.
• Participate in on-call support during critical security incidents.
• Independently manage assigned projects while maintaining operational excellence.