Network Security Engineer

Reports To: Network Security Architect Department: Information TechnologyLocation/Schedule: Chicago, IL/Hybrid, Minnetonka, MN, and Tampa, FL preferredClassification: Full-Time /ExemptWho We Are:Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.Position Overview:As the Center of Excellence continues to grow, we are seeking a Network Security Engineer to operationalize the CoE's architectural direction, turning reference architectures, design patterns, and standards into working, validated, and supportable implementations across the enterprise.This role executes proofs of concept, builds reference implementations, supports design reviews, and partners directly with subsidiary engineering teams, BISOs, and infrastructure teams to deliver secure, consistent, and modern network security solutions across on-premises, cloud, hybrid, and intercompany environments.Essential Job Functions:Implement, configure, and validate network security solutions aligned with CoE architectural standards, reference designs, and design patterns.Build and maintain proofs-of-concept, reference implementations, and lab environments to support architectural decisions and technology evaluations.Partner with the Security Architects and other technology staff to advance enterprise initiatives in segmentation, Zero Trust, SASE/SSE, and secure connectivity across on-prem, cloud, and subsidiary environments.Support architectural design reviews by providing engineering perspective, feasibility analysis, and implementation guidance.Assist in evaluating and piloting network security technologies (next-gen firewalls, SASE/SSE, NDR, DDI, WAF/CDN, micro-segmentation, etc.) and document findings for the CoE.Implement and tune AI-driven security capabilities (e.g., ML-based NDR/IDS/IPS, behavioral analytics, anomaly detection) within network security platforms.Help identify and mitigate risks associated with AI/ML usage, including data exposure, model security, and LLM-driven workflows from a network engineering perspective.Configure controls in alignment with threat intelligence, regulatory requirements, and enterprise risk profiles.Partner with subsidiary engineers, BISOs, and infrastructure teams to deploy and operate CoE-aligned solutions in a federated environment.Document standards, build guides, runbooks, and as-built designs to enable consistent adoption across subsidiaries as the CoE expands.Communicate effectively with technical stakeholders, presenting engineering findings, PoC results, and implementation recommendations.Qualifications:3-5 years of hands-on network and/or network security engineering experience.Strong hands-on experience with routing, switching, cloud networking, and enterprise protocols (BGP, OSPF, VXLAN, IPsec, TLS, etc.).Strong hands-on experience with enterprise DNS, DHCP, and IPAM (DDI), including secure DNS design, DNS security controls (DNSSEC, DoH/DoT, protective DNS), and troubleshooting complex DNS resolution issues across on-prem, cloud, and remote-access (e.g., ZPA/ZIA) environments.Hands-on implementation experience with Zero Trust, hybrid/multi-cloud, and inter-company connectivity designs.Experience working within federated and/or multi-entity organizations (holding companies, subsidiaries, or M&A environments).Working familiarity with NIST CSF, ISO/IEC 27002, and CIS Controls.Familiarity with AI-enhanced security technologies (e.g., ML-based NDR/EDR, AI-driven traffic analysis, automated threat modeling tools).Experience with AI-powered capabilities in AWS, Azure, and/or GCP from a network security perspective.Hands-on engineering experience with leading network and security platforms such as Palo Alto Networks, Zscaler (ZIA/ZPA/ZDX), Infoblox, Cisco, F5, Cloudflare/Akamai, VMware NSX, or comparable technologies.ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.