Summary

The Senior Network Security Engineer designs, implements, and supports Baylor College of Medicine’s enterprise security infrastructure and solutions, with a primary focus on network and infrastructure security. This role is responsible for securing and optimizing firewalls, application load balancers, intrusion prevention systems, VPNs, SD-WAN security, and other security technologies that protect the College’s critical systems, data, and communications services. The Senior Security Engineer partners with network, compute, cloud, architecture, and other OIT teams to develop and implement secure, scalable, reliable, and high-performing solutions that align with the College’s security requirements and enterprise architecture. The position provides technical leadership and mentorship to security and network engineering staff and serves as a senior technical resource and escalation point for complex security incidents, infrastructure vulnerabilities, and security-related design and operational issues. The role works closely with security architects and other technical leaders to evaluate emerging security technologies, develop and implement security solutions, identify opportunities to strengthen the College’s security posture, and drive continuous improvement in the effectiveness, scalability, and resilience of Baylor’s enterprise security environment. Your time will be split between 60-70% project work and 30-40% operational daily work. The individual will carry and be financially responsible for a Smartphone for 24 x 7 x 365 response to any/all business-related matters. This position will participate in an on-call rotation roughly every 10 weeks.

Internal title:  Senior IT Security Associate; working title Senior Network Security Engineer

Job Duties

• Designs, implements, configures, and maintains Baylor’s enterprise network security infrastructure, including firewalls, application load balancers, VPN, SD-WAN security, intrusion prevention, and other security related platforms.
• Develops secure, highly available, scalable solutions aligned with best practices and organizational requirements.
• Leads root cause investigation, troubleshooting, resolution, and documentation of complex network security and infrastructure incidents. Serves as a senior escalation point and identifies root causes and corrective actions to prevent recurrence.
• Identifies, assesses, and prioritizes security risks associated with network infrastructure and services. Participates in security reviews, assessments, and technology evaluations to strengthen Baylor’s overall security posture.
• Partners with OIT Security and Compliance to develop and maintain security policies, procedures, standards, and guidelines. Ensures security infrastructure aligns with organizational, regulatory, and industry requirements.
• Provides senior-level technical guidance and consulting on security architecture, infrastructure design, and implementation. Mentors junior technical staff and promotes secure, reliable, scalable, and supportable solutions.
• Serves as a senior technical resource for security projects, including technology evaluation, design, implementation, migration, and lifecycle management. Coordinates technical activities to ensure successful implementation.
• Identifies opportunities to improve security operations through automation, monitoring, and process improvements. 
• Leverages scripting and orchestration to improve efficiency, consistency, and scalability.
• Owns one or more security services and continuously improves their security, reliability, performance, and operational efficiency.
• Leads the use of automation, AI, ServiceNow, and emerging technologies to strengthen BCM’s security posture, improve operational efficiency, reduce manual effort, and enhance security visibility and response. 
• Performs other job-related duties as assigned. 

Minimum Qualifications

• Bachelor's degree. Four years of relevant experience may substitute for degree requirement. 
• Four years of relevant experience.

Preferred Qualifications and Skills

• 5 years of general IT experience.
• 7-10 years of data security and/or data networking experience.
• Advanced knowledge of implementing, configuring, troubleshooting, and securing enterprise security technologies, including firewalls, VPNs, micro segmentation, Network Access Control, Application Load Balancers, URL filtering, and IDS/IPS.
• Strong understanding of enterprise networking concepts, including TCP/IP, subnetting, routing, switching, and network segmentation.
• Advanced ability to analyze network traffic using packet capture and protocol analysis to troubleshoot complex security and connectivity issues.
• Strong understanding of secure network architecture, high availability, and integration of security controls across LAN, WAN, data center, and cloud environments.
• Excellent written, verbal, interpersonal, and technical communication skills, with the ability to collaborate across technical teams and provide senior-level guidance.
• Proficiency in using spreadsheets and other tools for analysis. 
• Ability to use SolarWinds, and other monitoring and management tools to analyze network performance, identify trends, create alerts, support operational decisions, and drive continuous improvement of the environment.
• Demonstrated ability to lead infrastructure projects and security projects of all sizes (small, medium, and large), effectively managing priorities, coordinating cross-functional teams, and adapting to changing requirements and organizational needs.