Network Engineer III

Senior Network EngineerThe Senior Network Engineer will play a vital role in fortifying Simpson Thacher's network and security, ensuring the protection of our infrastructure which aligns with our commitment to operational excellence and innovation. The role is critical for maintaining the safety and integrity of our IT infrastructure, ensuring seamless and secure operations across the company. The Senior Network Engineer will directly have an impact on the Firm's ability to safeguard its digital assets, maintain regulatory compliance, and ensure the continuous delivery of high-quality services to our clients and stakeholders.Essential Job Duties & ResponsibilitiesDeep-Expert level proficiency with leading enterprise platforms like Palo Alto networks, PAN OS, Panorama, Cisco and Fortinet as well as the Palo Alto Networks family of Next Gen firewalls, including but not limited to:firewall rule creationConfiguring Policy based forwarding rulesCreate site to site VPNs and SASE targetsExperienced with deploying Palo Alto SDWAN-IONsArchitect & Design, deploy, and maintain secure network solutions across on premises, and cloud environments.Manage firewall rules and policies to ensure secure and efficient network traffic flow, perform rule base optimization and establish security zones to harden the enterpriseConduct regular system audits to assess security risks and compliance with established protocols, ensuring that our network defenses remain impervious to external threatsIdentify vulnerabilities within our network and recommend enhancements to our security postureCollaborate closely with other IT teams, including the Identity and Access Management (IAM) and Service Delivery teams, to integrate firewall management with wider security and operational strategiesEnsure firewall configurations and policies maintain compliance with regulatory frameworks.Provide technical support and guidance in network security issues to various departments, enhancing the overall security knowledge within the companyStay up to date with emerging security threats and firewall technologies to continuously improve our security frameworkLead Firewall migration projects using vendor specific tools and oversee hardware/Software upgrades.When needed provide technical guidance, training and troubleshooting support to junior network engineers and security engineers.Perform other duties as neededEducationRequiredBachelor's degree in information technology, Cybersecurity, Computer Science, or a related field, or equivalent professional experience in network securitySkills and ExperienceRequired7+ years of relevant experienceProficient in network protocols, routing and switching concepts, and the ability to troubleshoot complex network security issuesAbility to perform with little to no guidance from managementFamiliarity with various firewall management tools and security monitoring technologies.Excellent analytical and problem-solving skills, with the ability to make quick, informed decisionsExtreme understanding with Palo Alto Networks Prisma Access VPN solutionAbility to configure Prisma service connections and Prisma HIP checksFamiliarity with SASE targetsPreferredLegal IT experience a plus but not requiredSalary InformationNY Only: The estimated base salary range for this position is $175,000 to $210,000 at the time of posting.The actual salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job. This role is exempt meaning it is not overtime pay eligible.Simpson Thacher will not sponsor applicants for work visas for this position.