AVP, Network Security Engineer

LPL Financial Corp is seeking an AVP Tech Network Engineer, Security to design, engineer, and operate network security capabilities that help deliver scalable, resilient, and secure networking solutions. This hybrid role based in Fort Mill, SC combines hands-on security engineering with automation and cloud-focused implementation, supporting critical client-facing infrastructure while you contribute to continuous improvement.

Why this role

• Collaborative, fast-paced culture focused on integrity, continuous improvement, and client success
• Hands-on security ownership spanning firewall, DDoS, NAC/ISE, VPN remote access, and AWS cloud security
• Automation and orchestration impact using scripting languages and APIs to improve security operations
• Strong benefits including 401(k) matching, health benefits, employee stock options, and paid time off

Responsibilities

• Design and engineer network security solutions using Palo Alto, Cisco FTD, and Fortinet firewalls
• Build automation using Python or PERL, leveraging APIs for data exchange
• Engineer and operate the VPN and Cisco ISE/NAC remote access environment
• Implement firewall solutions in AWS using an auto-scaling design
• Troubleshoot complex network security issues, identify root cause, and drive ongoing platform improvements
• Harden platform devices to reduce the vulnerability footprint
• Manage firewall service requests
• Manage and optimize logging for firewall traffic and rule-based activity
• Maintain security baseline standards, along with design documentation and diagrams
• Travel up to 10% based on business needs

Requirements

• 5+ years of Network and Security Engineering experience, with emphasis on security products from Radware, Fortinet, Cisco, and Palo Alto
• 2+ years with security technologies/products such as DDoS, proxy, VPN, firewall orchestration, and/or network access control
• 2+ years of network security hardening and controls, plus hands-on experience using network monitoring and logging tools (e.g., SolarWinds, LiveNX, ELK)
• 2+ years of network defense technology experience both on-prem and in cloud environments

Core competencies

• Hands-on engineering experience with Radware, Palo Alto, Fortinet, and Cisco security products, including management platforms
• Ability to think critically and perform in high-pressure situations where cyber threats evolve unpredictably
• Strong interpersonal and presentation skills in both oral and written communication, with the ability to explain complex technologies with business acumen
• Experience with Radware Defense Pro hardware and Cisco ISE
• Understanding of network security best practices and knowledge of native firewalls in AWS and Azure

Helpful qualifications

• Bachelor’s Degree or equivalent work experience
• CCNA, CCNP, or CISSP is a plus
• Experience with scripting and automation tools
• Experience with Agile

Compensation

Pay range: USD 103,618 - 172,628 per year. Actual base salary varies based on relevant skills, prior experience, education, base pay of internal peers, demonstrated performance, and geographic location.

Additional information

• This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
• LPL will only communicate with applicants from an @lplfinancial.com email address and will never conduct an interview online or in a chatroom forum.
• During an interview, LPL will not request any form of payment or information regarding an applicant’s bank or credit card.