Security Engineer III

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer III based in United States. The Security Engineer III is a senior individual contributor responsible for security architecture, firewall infrastructure, standards, and security posture across a multi-site broadband environment. You will own the firewall estate, establish consistent access-control and segmentation standards, and personally execute complex migrations and high-risk changes. The role combines hands-on engineering with long-term roadmap ownership, compliance readiness, documentation, and technical program leadership. You will work across network, security, infrastructure, compliance, vendors, and executive stakeholders to strengthen the organization’s overall security posture. The position also serves as a technical incident commander for major security events and drives automation, policy-as-code, and drift detection. Success requires someone who can operate independently, make architecture decisions, communicate with senior leadership, and remain deeply hands-on. This is a remote role with proximity to a designated property required, alongside occasional travel, maintenance windows, and on-call responsibilities. Accountabilities: - Own the firewall estate across six properties, including platform strategy, reference architecture, vendor relationships, refresh planning, capacity planning, and high-risk migrations. - Define and maintain security architecture standards covering firewalls, access control, network segmentation, hardening, rule lifecycle management, and documented exceptions. - Establish an authoritative understanding of network environments across edge, core, plant, subscriber, and management planes, including trust boundaries and data flows. - Lead the adoption of common security standards across properties while documenting and governing legitimate deviations.

- Maintain comprehensive security documentation, including architecture diagrams, standards, runbooks, decision records, and review processes. - Develop and maintain a security posture roadmap aligned with NIST CSF and CIS Controls, including current-state assessments, remediation priorities, and executive-level metrics. - Own cybersecurity and supply chain risk management plans supporting broadband grant requirements and relevant regulatory obligations. - Support CPNI requirements, lawful-process handling, breach notification analysis, audit readiness, and cyber insurance evidence requirements. - Lead major security initiatives such as zero-trust network access, privileged access management, endpoint protection consolidation, resilient out-of-band access, and security logging. - Evaluate security vendors, support contract and renewal negotiations, manage technical engagements, and contribute to security budgets and multi-year capital planning. - Serve as technical incident commander during major security incidents, leading containment, forensic readiness, evidence handling, and break-glass access procedures. - Run tabletop exercises and coordinate with legal and compliance stakeholders regarding notification thresholds and regulatory exposure. - Drive automation for policy-as-code, drift detection, rollback capabilities, and tamper-evident audit evidence while personally contributing to implementation. - Establish responsible use of AI tooling within security workflows, keeping AI advisory and outside the production control path. - Mentor Tier I and Tier II engineers and develop the internal capability to independently execute security migrations and initiatives. - Define and manage first-year outcomes, including firewall estate modernization, standardized security controls, complete documentation, posture improvements, current compliance evidence, and reduced critical findings.