Network Security Engineer

Who We Are

Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview

As the Center of Excellence continues to grow, we are seeking a Network Security Engineer to operationalize the CoE's architectural direction, turning reference architectures, design patterns, and standards into working, validated, and supportable implementations across the enterprise.

This role executes proof-of-concepts, builds reference implementations, supports design reviews, and partners directly with subsidiary engineering teams, BISOs, and infrastructure teams to deliver secure, consistent, and modern network security solutions across on-premises, cloud, hybrid, and inter-company environments.

Essential Job Functions:

• Implement, configure, and validate network security solutions aligned with CoE architectural standards, reference designs, and design patterns.
• Build and maintain proof-of-concepts (PoCs), reference implementations, and lab environments to support architectural decisions and technology evaluations.
• Partner with the Security Architects and other technology staff to advance enterprise initiatives in segmentation, Zero Trust, SASE/SSE, and secure connectivity across on-prem, cloud, and subsidiary environments.
• Support architectural design reviews by providing engineering perspective, feasibility analysis, and implementation guidance.
• Assist in evaluating and piloting network security technologies (next-gen firewalls, SASE/SSE, NDR, DDI, WAF/CDN, micro-segmentation, etc.) and document findings for the CoE.
• Implement and tune AI-driven security capabilities (e.g., ML-based NDR/IDS/IPS, behavioral analytics, anomaly detection) within network security platforms.
• Help identify and mitigate risks associated with AI/ML usage, including data exposure, model security, and LLM-driven workflows from a network engineering perspective.
• Configure controls in alignment with threat intelligence, regulatory requirements, and enterprise risk profiles.
• Partner with subsidiary engineers, BISOs, and infrastructure teams to deploy and operate CoE-aligned solutions in a federated environment.
• Document standards, build guides, runbooks, and as-built designs to enable consistent adoption across subsidiaries as the CoE expands.
• Communicate effectively with technical stakeholders, presenting engineering findings, PoC results, and implementation recommendations.
• Perform other duties as assigned.

Qualifications:

• 3-5 years of hands-on network and/or network security engineering experience.
• Strong hands-on experience with routing, switching, cloud networking, and enterprise protocols (BGP, OSPF, VXLAN, IPsec, TLS, etc.).
• Strong hands-on experience with enterprise DNS, DHCP, and IPAM (DDI) - including secure DNS design, DNS security controls (DNSSEC, DoH/DoT, protective DNS), and troubleshooting complex DNS resolution issues across on-prem, cloud, and remote-access (e.g., ZPA/ZIA) environments.
• Hands-on implementation experience with Zero Trust, hybrid/multi-cloud, and inter-company connectivity designs.
• Experience working within federated and/or multi-entity organizations (holding companies, subsidiaries, or M&A environments).
• Working familiarity with NIST CSF, ISO/IEC 27002, and CIS Controls.
• Familiarity with AI-enhanced security technologies (e.g., ML-based NDR/EDR, AI-driven traffic analysis, automated threat modeling tools).
• Experience with AI-powered capabilities in AWS, Azure, and/or GCP from a network security perspective.
• Hands-on engineering experience with leading network and security platforms such as Palo Alto Networks, Zscaler (ZIA/ZPA/ZDX), Infoblox, Cisco, F5, Cloudflare/Akamai, VMware NSX, or comparable equivalent technologies.
• Strong written and verbal communication and documentation skills.

Equal Opportunity

Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights (https://www.eeoc.gov/poster) notice from the Department of Labor.