Director Security Infrastructure & Engineering

Job description

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them. Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself. ***Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.*** The Director Security Infrastructure & Engineering will lead teams responsible for designing, implementing, managing, and optimizing enterprise security infrastructure across on-premises, cloud, and hybrid environments. This role provides strategic and technical leadership for network security, Palo Alto Networks firewalls, Prisma Access, and cloud security infrastructure across AWS and Microsoft Azure. The Director will partner with technology and business stakeholders to align security infrastructure with organizational objectives, operational resilience, and regulatory requirements while developing high-performing engineering teams. What you will do: • Lead the day-to-day management and performance of enterprise security infrastructure and engineering teams. • Develop and execute departmental strategies, engineering roadmaps, and resource plans aligned with broader Information Security objectives. • Oversee the design, implementation, management, and optimization of enterprise network security infrastructure across on-premises, cloud, and hybrid environments. • Direct the architecture, deployment, administration, and lifecycle management of Palo Alto Networks next-generation firewalls, Panorama, and associated security technologies. • Lead the implementation and management of Palo Alto Networks Prisma Access, including Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), and secure remote connectivity. • Oversee network security architecture, including firewalls, IDS/IPS, web application firewalls, VPN, routing, switching, and network segmentation. • Direct security infrastructure engineering across AWS and Microsoft Azure, including cloud firewalls, network security controls, secure connectivity, and hybrid cloud architecture. • Partner with Network Engineering, Cloud Engineering, and Infrastructure teams to maintain consistent security architecture and controls across enterprise environments. • Establish and maintain security infrastructure standards, configuration baselines, firewall policy governance, and operational procedures. • Ensure security infrastructure platforms are implemented, maintained, upgraded, tested, and optimized for availability, performance, and resilience. • Drive automation, infrastructure-as-code, and engineering improvements to enhance operational efficiency, scalability, and consistency. • Direct the evaluation, design, and implementation of security infrastructure solutions in accordance with enterprise architecture and change management processes. • Identify security infrastructure risks and direct the development of engineering solutions and mitigating controls. • Develop and monitor operational metrics related to infrastructure availability, performance, service delivery, and engineering effectiveness. • Provide technical leadership and subject matter expertise for enterprise security initiatives, infrastructure modernization, and cloud transformation projects. • Partner with business and technology stakeholders to resolve complex security infrastructure issues and communicate technical risks and recommendations. • Support regulatory inspections, internal and external audits, and compliance requirements involving assigned security infrastructure functions. • Oversee project execution, vendor relationships, departmental budgets, resource allocation, and staffing requirements. • Hire, develop, coach, and mentor managers and professional staff while promoting technical excellence, knowledge sharing, and professional development. • Build productive relationships across Information Technology, Enterprise Architecture, Risk, Audit, Compliance, and business functions. • Perform other duties and responsibilities as assigned. What you will bring: • Significant experience in enterprise security infrastructure, network security engineering, cloud security, or related information security disciplines. • 6 to 8 years of related management experience, consistent with the career-level expectations for this role. • Demonstrated experience leading multiple teams of security engineering professionals and/or subordinate managers. • Experience working in a complex technical environment. • Extensive experience with Palo Alto Networks next-generation firewalls, Panorama, and Prisma Access, including enterprise architecture, deployment, administration, and security policy management. • Strong knowledge of enterprise network infrastructure and security technologies, including TCP/IP, BGP, OSPF, routing, switching, VPN, network segmentation, IDS/IPS, and web application firewalls. • Demonstrated experience designing and managing security infrastructure in AWS and Microsoft Azure, including cloud networking, firewalls, network security controls, and hybrid cloud connectivity. • Strong understanding of AWS security technologies, including VPC, Security Groups, Network ACLs, AWS Network Firewall, Transit Gateway, and related services. • Strong understanding of Azure security technologies, including Azure Virtual Network, Azure Firewall, Network Security Groups, Azure Virtual WAN, and related services. • Experience with Zero Trust architecture, SASE, cloud security principles, and secure enterprise network design. • Experience managing third-party technology providers, infrastructure modernization initiatives, and complex security engineering projects. • Demonstrated knowledge of security architecture standards, infrastructure hardening, configuration management, change control, and regulatory requirements. • Strong analytical, problem-solving, organizational, and prioritization skills, with the ability to manage complex technical initiatives and competing business requirements. • Demonstrated ability to manage professional staff, subordinate managers, indirect resources, and vendors. • Strong written and verbal communication skills with the ability to translate complex technical issues into business language and influence stakeholders across multiple levels of the organization. What will set you apart: • Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, Network Engineering, or a related discipline, or equivalent applicable experience. • Security and technical certifications such as CISSP, CISM, Palo Alto Networks PCNSE or equivalent, AWS Certified Security Specialty, Microsoft Azure certifications, CCNP, or comparable industry certifications. • Experience in financial services or another highly regulated industry. • Familiarity with infrastructure automation and configuration management technologies such as Terraform, Ansible, Python, or PowerShell. This job operates in a professional office environment. This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job. The employer has the right to revise this job description at any time. You will be evaluated in part based on your performance of the responsibilities and/or tasks listed in this job description. You may be required to perform other duties that are not included on this job description. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason, as per terms and conditions of your employment contract. What we offer you We offer an array of diverse and inclusive benefits regardless of where you are in your career. We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance. Medical, dental, vision and life insurance Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup Tuition reimbursement up to $5,250/year Business-casual environment that includes the option to wear jeans Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year Paid volunteer time — 16 hours per calendar year Leave of absence programs – including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA) Business Resource Groups (BRGs) – BRGs facilitate inclusion and collaboration across our business internally and throughout the communities where we live, work and play. BRGs are open to all. Base Salary Range $138,000.00 - $200,100.00 The salary range above shows the typical minimum to maximum base salary range for this position in the location listed. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer. Equal opportunity employer • Drug-free workplace We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law. ***For remote and hybrid positions you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet. Other necessary computer equipment, will be provided. You may be required to work in the office if you do not have an adequate home work environment and the required internet connection.*** Job Posting End Date at 12:01 am on: 10-29-2026 Want the latest money news and views shaping how we live, work and play? Stay in the know with The Currency and sign up for Empower’s free newsletter.