Senior Network Security Engineer

This role designs, implements, and supports Baylor College of Medicine’s enterprise security infrastructure with an emphasis on network and infrastructure security. The Senior Network Security Engineer provides technical leadership, leads complex incident troubleshooting, and helps strengthen security posture, reliability, scalability, and resilience.

Role Focus

• Primary focus on network and infrastructure security solutions for the enterprise environment.
• Technical leadership and senior escalation support for complex security incidents and vulnerabilities.
• Collaboration with OIT teams to improve security posture and strengthen security operations through continuous improvement.

Responsibilities

• Design, implement, configure, and maintain enterprise network security infrastructure, including firewalls, application load balancers, VPN, SD-WAN security, intrusion prevention, and related security platforms.
• Develop secure solutions that are highly available, scalable, and aligned with best practices and organizational requirements.
• Lead root cause investigation, troubleshooting, resolution, and documentation for complex network security and infrastructure incidents.
• Identify root causes and corrective actions to prevent recurrence; act as a senior escalation point for security and infrastructure issues.
• Identify, assess, and prioritize security risks tied to network infrastructure and services.
• Participate in security reviews, assessments, and technology evaluations to improve Baylor’s overall security posture.
• Partner with OIT Security and Compliance to develop and maintain security policies, procedures, standards, and guidelines.
• Ensure security infrastructure alignment with organizational, regulatory, and industry requirements.
• Provide senior-level guidance and consulting for security architecture, infrastructure design, and implementation.
• Mentor junior technical staff and promote secure, reliable, scalable, and supportable solutions.
• Serve as a senior technical resource across security project work, including technology evaluation, design, implementation, migration, and lifecycle management.
• Coordinate technical activities to support successful implementation.
• Identify opportunities to improve security operations through automation, monitoring, and process improvements.
• Use scripting and orchestration to improve efficiency, consistency, and scalability.
• Own one or more security services and continuously improve security, reliability, performance, and operational efficiency.
• Lead adoption of automation, AI, ServiceNow, and emerging technologies to improve security visibility and response while reducing manual effort.
• Perform other job-related duties as assigned.

Required Qualifications

• Bachelor’s degree. Four years of relevant experience may substitute for the degree requirement.
• Four years of relevant experience.

Preferred Qualifications and Skills

• 5 years of general IT experience.
• 7-10 years of data security and/or data networking experience.
• Advanced knowledge of implementing, configuring, troubleshooting, and securing enterprise security technologies, including firewalls, VPNs, micro segmentation, Network Access Control, Application Load Balancers, URL filtering, and IDS/IPS.
• Strong understanding of enterprise networking concepts including TCP/IP, subnetting, routing, switching, and network segmentation.
• Advanced ability to analyze network traffic using packet capture and protocol analysis to troubleshoot complex security and connectivity issues.
• Strong understanding of secure network architecture, high availability, and integration of security controls across LAN, WAN, data center, and cloud environments.
• Excellent written, verbal, interpersonal, and technical communication skills, including the ability to provide senior-level guidance and collaborate across technical teams.
• Proficiency in spreadsheets and other tools for analysis.
• Ability to use SolarWinds and other monitoring and management tools to analyze network performance, identify trends, create alerts, support operational decisions, and drive continuous improvement.
• Demonstrated ability to lead infrastructure and security projects of varying sizes, managing priorities, coordinating cross-functional teams, and adapting to changing requirements.

Technology Exposure

• Firewalls
• Application load balancers
• VPN
• SD-WAN security
• Intrusion prevention
• Scripting and orchestration
• Automation
• AI
• ServiceNow
• SolarWinds
• Micro segmentation
• Network Access Control
• URL filtering
• IDS/IPS
• Packet capture and protocol analysis
• Spreadsheets
• TCP/IP
• Subnetting, routing, switching

Work Schedule and On-Call

• Time split: 60-70% project work and 30-40% operational daily work.
• On-call rotation roughly every 10 weeks.
• Financial responsibility for a smartphone for 24 x 7 x 365 response to business-related matters.

Compensation and Location

• Location: Houston, TX (onsite)
• Salary: USD 111,118 - 130,728 per year
• Internal title: Senior IT Security Associate; working title: Senior Network Security Engineer

Work Authorization

• This position is not eligible for visa sponsorship.
• Candidates must be legally authorized to work in the United States at the time of application and throughout employment.