Job Summary
Senior level individual contributor responsible for bridging the gap between a fast-paced information security program and a complex portfolio of IT projects. This role acts as the owner for network security and segmentation programs. This position is responsible for network security engineering implementation and management of various security technologies including firewall security endpoint-based network segmentation tooling and other endpoint security products.. This position provides technical leadership in the implementation for security tools which manage network security network segmentation and similar endpoint-based security controls.
Essential Duties & Responsibilities
Performs a combination of duties in accordance with departmental guidelines:

• Develops overall strategy for network segmentation endpoint tooling network security products and related endpoint-based controls
• Performs identification selection installation configuration tuning and maintenance of network security and segmentation solutions such as Guardicore or Illumio Designs operational processes procedures alerts and policies for macro/micro segmentation controls
• Provides engineering support for next gen firewall IDS IPS proxy and threat protection solutions
• Applies implementation expertise to provide support for network detection and response tooling
• Collaborates with product owners IT infrastructure support and other stakeholders to gather product requirements.
• Designs evaluates tests and implements appropriate security methods and control techniques such macro/micro segmentation network security infrastructure and endpoint-based network security solutions.
• Provides guidance on cloud security and advises on enabling cloud native controls to meet highest cyber security standards with respect to network engineering and network segmentation.
• Acts as an expert technical resource to information security infrastructure teams in all phases of the development and implementation process of network segmentation and security projects.

May perform additional duties as assigned.
Reporting Relationship
Typically AVP or above
Skills Knowledge & Abilities

• Proven ability implementing Network Security controls such as Palo Alto Guardicore Illumio or network intrusion prevention technologies
• Expert knowledge of Zero Trust Network Architecture concepts and/or micro/macro segmentation across comparable organization (e.g. size legacy technology etc.) as well as providing day-to-day operational support.
• Comfort with many security technologies including endpoint detection and response scanning packet capture analysis and similar tools
• Significant experience with multiple change control processes and working with stakeholders (e.g. Application Development Infrastructure Architecture PMO) across delivery lifecycle Skilled with security testing QA and troubleshooting of IT and security systems
• Able to work effectively in a cross-functional environment including with outsourced support teams
• Strong analytical and problem-solving skills.
• Excellent communications and interpersonal skills and the ability to work effectively with peers IT management and staff and internal/external business partners/clients.
• Excellent understanding of security policy construction and publication.
• Proven long-term working experience with mature security operations center (SOC) team
• Stays up-to-date with new technologies tools applications and systems both supporting the information security organization and CNA's operations.

Education & Experience

• Bachelor's degree in Computer Science or related discipline or equivalent work experience.
• Typically a minimum of ten years of related work experience in Information Technology preferably in the security aspects of multiple platforms operating systems software communications and network protocols or an equivalent combination.
• Applicable certifications preferred (e.g. CISSP CCSP Network+ and/or Security+ etc.)
• Insurance industry experience preferred.