Role summary

Own cost efficiency and financial accountability across Azure. This role focuses on practical execution of savings and governance, not theoretical optimization. You’ll bring clarity to Azure spend, drive disciplined use of reservations and benefits, and prevent re-accumulation of waste.

Budgets and forecasts are tools to guide behavior—not ends in themselves.

What you’ll do

• Cost visibility & attribution
  • Build a clean Azure cost baseline by subscription, application, and owner.
  • Identify structural cost drivers and recurring inefficiencies.
• Optimization execution
  • Lead Azure Reservation and Savings Plan strategies, including Hybrid Benefit usage.
  • Drive cleanup of idle VMs, disks, snapshots, and runaway log/telemetry costs.
• Governance
  • Improve tagging and subscription hygiene; support management group and policy enforcement.
  • Establish lightweight guardrails that prevent obvious waste without slowing teams down.
• Forecasting & KPIs
  • Produce rolling forecasts and budget views tied to real usage patterns.
  • Track a small set of KPIs (coverage, utilization, waste reduction, realized savings).
• Collaboration
  • Work directly with platform and product teams to align cost decisions with technical realities.

What success looks like

• Azure spend growth is explainable and intentional.
• Reservation and benefit strategies are actively managed, not set-and-forget.
• Waste is identified early and corrected quickly.

Required experience

• 5+ years in FinOps or Azure cost management roles.
• Strong knowledge of Azure Cost Management, subscriptions, RBAC, and tagging.
• Proven experience implementing Azure Reservations/Savings Plans.
• Analytical mindset with the confidence to challenge assumptions.

Nice to have

• Azure certifications (AZ-104, AZ-305)
• Experience with Azure Policy for cost governance
• SQL, Power BI, or similar analytical tooling

As a member of the Network Security team, this role is tasked with proactive management and monitoring of the Company's infrastructure and cloud computing services, with a particular focus on Network Security, and participating in any needed troubleshooting and investigations. Individuals in this role will also assist with other security-related tasks, such as administration, configuration, and deployment of security solutions – and will collaborate closely with Information Security on relevant tasks, such as vulnerability management.

The successful candidate for this position is a highly-motivated individual with a strong background in Networking, Security and Enterprise Systems who excels in operating and deploying security technology, communicating clearly in both technical and nontechnical settings, and collaborating with diverse teams across the organization.

About the Role

A Senior Network Security Engineer is expected to take ownership of, manage and maintain network security systems and tools, and troubleshoot highly technical issues in a logical manner to reach a final resolution. They should recommend solutions to solve these issues and work closely with other team members to meet common objectives. This engineer should have a deep understanding of firewalls and security best-practice, familiarity with route/switch (including dynamic protocols) and other datacenter technologies.

Proven, demonstrated success managing datacenter firewall, security and networking solutions in a large enterprise environment is a requirement.

Senior engineers should be eager to learn and work on new hardware and technologies, be very self-motivated and be able to succeed with minimal day-to-day supervision – but also able and willing to take direction. They may also function in a lead capacity for specific projects or functional areas and are expected to help mentor teammates.

We value professionalism, humility and collaboration. Respect for teammates and stakeholders – irrespective of background or title – is essential.

Key Responsibilities

• Research, evaluate, develop, and implement security solutions and standards following industry best practices.
• Ensure that current and planned technical solutions are compatible with the company's business needs and strategic objectives.
• Maintain and operate toolsets and services which support network security operations in the company’s production environments.
• Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.
• Provide technical security expertise and assistance to other business units. Contribute to the Network Security team’s capabilities by sharing knowledge and expertise.
• Perform security audits and testing; evaluate system security configurations to ensure efficacy and compliance with documented policies, procedures and best practices
• Propose changes to existing policy and procedure to maintain alignment with evolving business requirements, best practices, etc.
• Utilize existing tools and platforms (e.g. Jenkins, Ansible, Strata/Panorama) to ensure adherence to established standards and leverage automation where justified.
• Participate in the team on-call rotation

Qualifications

• 7-10 years of experience with network security processes, policies and solutions
• Extensive technical, hands-on experience with firewalls – specifically Palo Alto and PANW cloud services
• Extensive experience with VPN – site-to-site and remote-access
• Intimate understanding of networking and network security principles and technologies
• Strong understanding of network protocols and applications
• Strong understanding of packet inspection and forensics methodologies and methods
• Strong understanding of current security threats, techniques, and landscape – as well as a dedicated and self-driven desire to research current and emerging threats in the information security landscape.
• Strong understanding of standardization and automation techniques and technologies
• Experience with scripting to automate repetitive or routine tasks (esp. Python)
• Experience with Cisco routers and switches
• Experience building and maintaining network security solutions in a large, distributed enterprise environment
• Deep understanding of TCP/IP, networking, routing and switching
• Highly skilled in troubleshooting techniques
• Outstanding communication skills, both written and verbal

Preferred Certifications

• SANS GIAC certifications
• PANW PCNSE / PCNSA certifications

This role is fully remote and has a budget of $140,000.00 - $150,000.00

A Senior Network Engineer will be expected to take ownership of and troubleshoot highly technical issues in a logical manner to reach a final resolution. They should recommend solutions to solve these issues and work closely with other team members to meet common objectives. This engineer should have a good base understanding of BGP and other datacenter technologies. They should also be eager to learn and work on new hardware and technologies. They should be very self-motivated and be able to succeed with minimal day-to-day supervision. This engineer should be respectful and courteous to all other departments. Previous data-center networking experience is required.  Previous experience with next-generation firewalling and network security technologies is also a requirement.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Designing and implementing complex network solutions to meet business requirements.

Managing and maintaining network infrastructure, including routers, switches, firewalls, and load balancers.

Troubleshooting network issues and providing timely resolution to ensure minimal downtime.

Monitoring network performance and security, implementing necessary improvements and optimizations.

Collaborating with cross-functional teams to plan and execute network upgrades and expansions.

Documenting network configurations, procedures, and best practices.

Mentoring junior network engineers and providing technical guidance and support.

Staying updated on emerging networking technologies and industry trends to drive innovation and improvement.

WHAT YOU’LL BRING:

Highly skilled in troubleshooting techniques.

7+ years of work experience as a network engineer preferably backed by current Cisco CCNP certifications and Palo Alto Experience

The ideal candidate should be calm under pressure, a team player, flexible, and customer focused.

Excellent written, oral and interpersonal communication skills.

Hands-on working experience in a multi-vendor environment including; Cisco Nexus and Palo Alto devices.

The candidate would have some with experience Linux.

Detailed security experience with ACLs, IPsec, SSL, traffic inspection, and DDoS mitigation techniques.

A working understanding of networking technologies such as BGP, EVPN, VXLAN, MSTP, HSRP, BFD, 802.3ad, OSPF, route reflectors, confederations, FIB/RIB, distributed forwarding, AAA, layer 2 switching, and IPv6.

 A strong working knowledge of next generation firewalls, deployment strategies, and network security best practices.

Experience with peering from on-prem networking to public cloud providers.

Strong experience with scripting languages like Python, Ansible, and shell scripting.