Reporting to the Director of Network Application Engineering, the Principal Network Security Engineer is seen as a technical expert in networking security. This is a technical, team lead, and hands on role, with a primary focus on design and implementation of network security change; although you will be expected to support the network security operations team with complex troubleshooting of issues as required. You will have experience of working in a high impact, mission critical environments, where service matters, and exceeding expectations is the norm. You have lead critical projects, thrive in critical problem solving, and enjoy leading a team working on projects

Core Skills & Experience: - A minimum 10+ years of hands on experience of network security solutions within a global enterprise scale organization (5,000-50,000 users) with both traditional datacenters and Cloud. - Considerable first-hand experience of design engineering and building resilient and scalable security solutions, ideally within finance or investment banking. - Cybersecurity principles, global financial services business models, as well as regional compliance standards, relevant local regulations, and applicable laws - The concepts of risk and compliance and how to translate these into effective security solutions. - Appreciation of automation and orchestration and will have experience of scripting against an API - Strong understanding of Layer 2, Layer 3 & Layer 4-7 network and security technologies. - Familiar with a variety of testing tools, networking technologies and techniques to accurately troubleshoot and resolve complex technical problems associated with the service, application and network hardware and software. Technical Skills & Experience: You will have expert knowledge and experience in several of the following areas: - NGFW platforms and management tools such as Tufin - Network Access Control in enterprise environments - Application Delivery & Load balancers - Public and Private cloud security - Workflow automation - Routing and switching - WAN Optimization - DNS, IPAM and DHCP It is desirable and advantageous to also have knowledge and experience of the following technology platforms: - Check Point, Fortinet, Tufin - Forescout, Cisco ISE - F5, Netscaler - Infoblox - Microsoft Active Directory, CyberArk - Azure log analytics - Akamai CDN - Illumio - Zscaler - Python - Ansible,Terraform - Azure and AWS native firewall and load balancing Technical Certification: It is desirable and advantageous to have the following certification or demonstrable working experience: - Check Point CSSE - CISSP - ITILv3 foundation or higher - Zscaler fundamentals certification, advanced preferred - F5

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose. https://www.northerntrust.com/content/dam/northerntrust/pws/nt/images/careers/ntawards.jpg We’d love to learn more about how your interests and experience could be a fit with one of the world’s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater Reasonable accommodation Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com. We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people. Apply today and talk to us about your flexible working requirements and together we can achieve greater.