Network Engineer, AVP - NetOps & Security

Blackstone is the world’s largest alternative asset manager. We seek to create positive economic impact and long-term value for our investors, the companies we invest in, and the communities in which we work. We do this by using extraordinary people and flexible capital to help companies solve problems. Our $1.1 trillion in assets under management include investment vehicles focused on private equity, real estate, public debt and equity, infrastructure, life sciences, growth equity, opportunistic, non-investment grade credit, real assets and secondary funds, all on a global basis. Further information is available at www.blackstone.com. Follow @blackstone on LinkedIn, Twitter, and Instagram.
 

Blackstone Technology & Innovations (BXTI) is the technology team at the core of each of Blackstone’s businesses and new growth initiatives. Serving both internal and external clients, we work to build the next generation of systems that manage risk, create efficiency and improve transparency within the firm and across our broad community of investors and portfolio companies.

BXTI is nimble and entrepreneurial – our open, iterative design processes and rapid pace of development mean that everyone on the team has the opportunity to make an impact from day one. We are problem solvers who can take projects from idea to implementation. We believe in active mentoring and developing excellence. We collaborate to find the best answers for our customers and for Blackstone. We are critical to the firm maintaining its competitive edge.

Role:

The Network Engineer works as part of the Cybersecurity & Enterprise Technology functions to implement, improve, and support Network Security tools. This role requires a blend of network engineering expertise and proficiency in managing and optimizing network tools and infrastructure.

Responsibilities:

• The candidate will be responsible for the engineering of vendor solutions at Blackstone, including Firewalls, ZTNA (Zero Trust Network Access), SWGs (Secure Web Gateways), Network Segmentation, Access Control, and Cloud Network Security (NACLs, NSGs).

• Provide engineering and operational support for network security products and services, including new deployments, hardware refresh/upgrades, migrations, and feature implementation.

• Improve support procedures, standardize, and document rigid processes.

• Leverage infrastructure-as-code frameworks (e.g., Terraform) to provision and maintain tool configurations and infrastructure.

• Analyze network traffic flow using SIEM platforms (e.g., Splunk) to optimize performance, rules, and ensure efficient network operations.

• Implement traditional segmentation policies (firewalling/ACLs) and Zero Trust Network policies, including micro-segmentation.

• Work closely with network architecture teams to evaluate the readiness of new features and functionalities.

• Improve and implement processes for overall infrastructure management, patch, and lifecycle management.

Qualifications:

• Minimum 5+ years of hands-on technical experience engineering Network Engineering, Network Security, or similar Network tools

• Experience with Zscaler ZIA & ZPA, Palo Alto Firewalls

• Preferred experience (or similar) with: Cloudgenix (SD-WAN), Cloudflare (WAF), Forescout (NAC), Tufin/Algosec (Firewall Orchestration)

• Hands-on experience with public cloud providers (AWS preferred) and cloud infrastructure management.

• Experience with infrastructure-as-code frameworks (e.g., Terraform Cloud).

• Ability to write automation scripts and web services (Python, Bash).

• Strong understanding of network protocols and information security best practices.

• Experience working with git source control and CI/CD systems (GitLab CI/CD).

• Good understanding of enterprise architecture, including endpoint, networ