Principal Network Security Engineer

Job Details: Job Description: About the Role  This principal-level individual contributor serves as Altera’s senior technical authority for network security architecture and engineering. The role defines scalable security patterns, guides complex designs, and provides hands-on expertise to strengthen the resilience, integrity, and protection of Altera’s global infrastructure and data. Department Description Altera’s Information Security organization is responsible for: Incident response and digital forensics Threat hunting and event analysis Security policy, standards, and governance Risk assessments and advisory Security architecture and engineering support Threat detection, monitoring, and forensic capabilities Security awareness and education Endpoint, network, and cloud security As Principal Network Security Engineer/Architect, you will shape, design, and improve the security of Altera’s on-premises, cloud, and hybrid network environments. You will operate as a hands-on technical lead and trusted advisor, influencing engineering teams through architecture, standards, technical decisions, and mentorship without direct people-management responsibility. Technical Strategy & Architecture Ownership Define and evolve Altera’s enterprise network security strategy, target-state architecture, technical roadmap, and reusable reference patterns. Serve as the senior technical authority for complex network security decisions, design exceptions, and modernization initiatives. Drive adoption of Zero Trust, least-privilege access, micro-segmentation, and secure-by-design network principles. Establish architecture standards, decision criteria, and measurable outcomes for attack-path reduction, rule hygiene, segmentation coverage, resilience, and network visibility. Network Security Architecture & Engineering Architect and review secure designs for data center, campus, laboratory, cloud, WAN, remote-access, and hybrid environments. Design segmentation and traffic-control models using security zones, VRFs, next-generation firewalls, secure routing, identity-aware access, and workload-level controls. Evaluate and guide adoption of ZTNA, SWG, SASE, SD-WAN, NDR, IDS/IPS, firewall, and network-security automation capabilities. Partner with network, cloud, platform, product security, and operations teams to translate security requirements into implementable designs. Validate architecture through design reviews, configuration analysis, packet and flow analysis, resilience testing, and post-implementation verification. Conduct ongoing firewall administration and operations including policy lifecycle management, rule administration, hardening, and exception governance. Threat Detection, Monitoring, & Incident Response Provide senior technical expertise during investigations involving network intrusion, lateral movement, command-and-control activity, privilege misuse, and data exfiltration.