Sr. Security Engineer I, Network

Alkami is a leading cloud-based digital banking solutions provider for financial institutions in the United States that helps clients to transform through retail and business banking, digital account opening and loan origination, payment fraud prevention, and data analytics and engagement solutions. Alkami’s Mobile App Platform has been certified by J.D. Power for providing clients with “An Outstanding Mobile Banking Platform Experience.”

Founded in 2009, we continue to be recognized for our intentional culture and tremendous growth (Best Place to Work in Fintech; Best & Brightest to Work For Nationally; and Comparably’s Best Company Culture, Best Career Growth, Best Engineering Team, and Best Places to Work in Dallas, among others). Through our bold investments in technology and people, we empower our clients to grow confidently, adapt quickly, and build thriving digital banking communities through tailored experiences for over 19.5M users.

As a remote-first company, most of our positions can be remote in the US, except for key roles, which will be indicated in the Job Title.

Follow us on Glassdoor and Linkedin!

As a Senior Security Engineer on Alkami’s Enterprise Information Security team, you will hold a highly visible, business-critical role safeguarding the resilience, availability, and integrity of online banking platforms. This position requires a self-starter who can critically assess risks, recommend solutions, and own the implementation and configuration of advanced security tools to protect internal and customer environments.

The role is central to advancing Alkami's network security posture by engineering and optimizing defensive controls. Key responsibilities include leading configuration, tuning, and lifecycle management of the Cloudflare Web Application Firewall (WAF) and leveraging Terraform to deploy scalable, automated configurations. You will manage and refine Palo Alto firewall policies enterprise-wide, ensuring alignment with emerging risks and business needs. You will manage and participate in other assigned Security Engineering technology platforms. As a member of the security engineering team, you will also participate in the ongoing management of Alkami’s certificate lifecycle program. This mature, mission-critical capability requires precision, collaboration, and operational excellence.

Your work will directly influence Alkami’s ability to deliver secure, reliable services by partnering closely with Security Architecture, Site Reliability Engineering (SRE), and Network Engineering teams to ensure that security and compliance requirements are embedded throughout the lifecycle of all technology initiatives.

Key Responsibilities and Duties:

• Security Operational Coverage and Ownership: Serve as the primary escalation resource for Cloudflare issue resolution. Provide operational coverage when issues arise and perform data analytics on the Cloudflare WAF to continuously learn and improve threat detection.

• Cloudflare & Infrastructure-as-Code (IaC): Engineer, optimize, and maintain Cloudflare security solutions (WAF, Bot Management, Traffic Filtering) and implement/manage configurations using Terraform-based IaC for consistency and scale.

• Network Security Governance: Manage and refine enterprise Palo Alto firewall policies, ensuring continuous tuning against emerging threats and aligning rule sets with business requirements.

• Secure Design & Collaboration: Partner with Security Architecture, SRE, and Engineering teams to ensure secure design and implementation of network paths, access patterns, and cloud services, and to provide actionable security requirements.

• Risk Management & Assessments: Conduct ongoing security assessments of network and application controls to identify risks, validate protections, and drive remediation activities with partner teams.

• Subject Matter Expertise (SME): Serve as the SME for Cloudflare WAF, Terraform, and Palo Alto firewall governance, participating in security incidents and contributing to strategic initiatives.

• Enablement & Lifecycle Management: Support the enterprise certificate lifecycle program and promote organizational awareness of network/application security best practices and secure patterns.

• On-Call and Mentoring: