Principal Member of Technical Staff

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Overview

Cloud & Network Security Design Engineer

This position seeks a highly skilled candidate with profound expertise in network security, encompassing comprehensive knowledge of Layer 2 and Layer 3 routing and switching architectures. The ideal individual will possess deep experience in the design and development of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV) platforms. A thorough understanding of contemporary cybersecurity trends, evolving threats, and state-of-the-art security technologies is essential to excel in this role.

Job Contribution

• As a Network Security Design Engineer, you will be entrusted with the architecture and design of robust, resilient Layer 2 and Layer 3 networks. You will leverage cutting-edge industry standards and best practices, including Access Control Lists (ACLs), Network Access Control and Authentication Mechanisms (NACAM), Zero Trust Network Access (ZTNA), advanced firewall implementations, and routing protocol hardening techniques. Your expertise will also extend to deploying encryption and authentication technologies such as MACsec and IPsec, implementing Unicast Reverse Path Forwarding (uRPF), mitigating Distributed Denial of Service (DDoS) attacks, enforcing route authentication protocols, and utilizing AI-driven threat detection and sophisticated mitigation strategies.
• Your role will involve meticulous evaluation of network routing designs to identify, analyze, and remediate vulnerabilities across AT&T’s diverse edge, core, and cloud network environments. This responsibility includes conducting comprehensive vulnerability assessments and collaborating closely with vendors to detect and address security weaknesses. You will employ a wide array of tools and methodologies across disaggregated hardware platforms operating on Cisco, Juniper, Arista, and DriveNet network operating systems.
• In addition, you will rigorously review vendor-issued Product Security Incident Response Team (PSIRT) announcements to ensure that AT&T’s networks remain protected against pertinent vulnerabilities. Proactive development and implementation of security strategies during the early stages of the design lifecycle will be critical to safeguarding all hardware platforms. Moreover, you will be expected to respond promptly to security incidents and alerts, working in close partnership with AT&T’s Chief Security Office, certification engineers, and Operations teams to uphold and enforce security best practices in both labs and production environments.

Key Roles and Responsibilities

• Design and develop AT&T Cloud Infrastructure tactical and strategic solutions to host critical business services, ensuring robust security by adhering to industry standards and best practices in cybersecurity.
• Perform new technology validation and prototyping of merchant silicon chip-set capabilities, disaggregated network hardware, Network Operating Systems (NOS), and physical and virtual compute infrastructure components within a secure proof of concept (POC) environment, evaluating security implications and hardening requirements.
• Collaborate with cross-functional teams—including architects, designers, certification, operations, integration, planning, site engineering, and automation—in a DevOps mode to deliver scalable, resilient, repeatable, and cost-effective designs that integrate comprehensive security controls to address complex networking and threat mitigation challenges.
• Leverage industry trends in SDN/NFV network automation, programming, and database modeling to develop zero-touch provisioning and automation ecosystems with embedded security policies, ensuring secure onboarding and lifecycle management of network resources.
• Deploy and manage virtualization environments based on Linux/KVM to host virtual networking functions (VNFs), incorporating security best practices such as secure configuration, isolation, and continuous monitoring to protect virtualized assets.
• Represent the group internally across AT&T to provide functional, technical, and security leadership, and externally to manage vendor relationships with a focus on maintaining high security standards and compliance.
• Collaborate with all project stakeholders and development teams to define complex, esoteric, and exigent requirements and solutions, ensuring that security considerations are integral to all phases of design, implementation, and operation.
• Demonstrate excellent communication and presentation skills, with the ability to work effectively with team membe