Senior Consultant I - Network Security Engineering
Join our Network Security Engineering team and help secure and modernize critical enterprise infrastructure. As a Senior Consultant I, you will engineer, support, automate, and maintain network security platforms that protect the organization while improving reliability, scalability, and operational efficiency.
We're looking for an experienced engineer with a strong foundation in networking and network security who enjoys solving complex technical challenges and leveraging automation to drive better outcomes. You'll work with technologies such as enterprise firewall platforms, Infrastructure as Code, CI/CD pipelines, APIs, scripting, and automation frameworks to streamline operations and enhance platform performance.
This is a hands-on role for someone who takes ownership, works independently, and delivers high-quality engineering solutions with limited oversight. You'll troubleshoot complex network and security issues, implement infrastructure improvements, support automation initiatives, and contribute ideas that help advance the team's engineering practices.
Key Responsibilities
•Engineer, support, and maintain enterprise network security platforms, including Palo Alto Networks and related security technologies.
•Implement, test, and validate network security solutions across enterprise and cloud environments.
•Troubleshoot complex network, firewall, routing, connectivity, and application communication issues.
•Develop and maintain automation using scripting, APIs, Infrastructure as Code (IaC), and configuration management tools.
•Build and support CI/CD pipelines for infrastructure deployment, testing, validation, and configuration management.
•Create automated pre- and post-change validation processes to improve reliability, consistency, and operational efficiency.
•Integrate security platforms with monitoring, deployment, and operational tooling to enhance visibility and automation.
•Identify and automate repetitive operational tasks to reduce manual effort and improve platform scalability.
•Support platform lifecycle initiatives, including upgrades, vulnerability remediation, technology refreshes, and modernization efforts.
•Partner with network, cloud, security, and application teams to deliver secure, resilient, and scalable solutions.
•Contribute to technical reviews, process improvements, and engineering best practices while operating within established architecture and security standards.
•Develop and maintain technical documentation, operational procedures, scripts, and automation.
•Provide technical assistance and knowledge sharing to other members of the team.
Required Qualifications
•Strong background in network engineering and network security.
•Strong understanding of core networking technologies and concepts, including: TCP/IP, Routing, Subnetting, NAT, DNS, and application connectivity.
•Experience engineering, implementing, or supporting enterprise firewall and network security platforms.
•Experience with Infrastructure as Code concepts, practices, and version-controlled infrastructure.
•Hands-on experience developing scripts and automation for infrastructure engineering and operational use cases, including areas such as: Infrastructure change implementation, Configuration management, Pre-change and post-change validation, Infrastructure monitoring and health checks, Data collection and reporting, Operational troubleshooting, API-driven infrastructure management.
•Working knowledge of scripting or programming languages such as Python, PowerShell, Bash, or similar languages.
•Experience working with REST APIs or other programmatic interfaces to interact with and automate infrastructure platforms.
•Experience developing, maintaining, or working with CI/CD pipelines for infrastructure configuration and deployment.
•Experience using source control and version-control practices, such as Git-based development workflows.
•Experience troubleshooting complex infrastructure, network connectivity, and security issues.
•Ability to independently analyze technical requirements and implement solutions within established architecture and engineering standards.
•Ability to take ownership of assigned technical work and drive it through implementation and validation with limited oversight.
•Strong communication and collaboration skills with the ability to work across infrastructure, security, networking, cloud, and application teams.
Preferred Qualifications
•Hands-on experience with Ansible for infrastructure configuration, deployment, orchestration, or automation.
•Hands on experience with Palo Alto Networks Firewalls and Panorama or similar firewall platforms.
•Experience supporting network security infrastructure within AWS, Azure, or other public cloud environments.
•Strong understanding of VPN technologies, network segmentation, and load balancing.
•Experience with CI/CD and automation technologies such as Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps, or similar platforms.
•Experience developing reusable automation frameworks, modules, or tooling for infrastructure engineering.
•Experience working within enterprise change-management and IT service-management processes.
•Experience working in a DevOps or product-oriented engineering environment.
•Experience modernizing traditional infrastructure platforms through automation and Infrastructure as Code.
Skills
Automation, DevOps, Infrastructure As Code (IaC), Network Security Engineering, Palo Alto Networks Panorama, Red Hat Ansible
Compensation
Compensation offered for this role is 75,100.00 - 126,325.00 annually and is based on experience and qualifications. The candidate(s) offered this position will be required to submit to a background investigation.
Allstate generally does not sponsor individuals for employment-based visas for this position.
Allstate provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse. Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs.
When working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload.
