Senior Engineer, Network Security

This role is temporarily eligible for a pay premium above the posted salary range that is reassessed annually. You are encouraged to have an open dialogue with your recruiter who can provide more specific pay details for this role. TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

The Senior Engineer, Network Security role is responsible for the engineering and design of TD's cloud SaaS Secure Web Gateway (SWG) and Secure Access Service Edge (SASE) infrastructure. The successful candidate will be highly versed in managing large scale enterprise deployments of Data Loss Prevention (DLP), Borderless WAN VPN functions and related network security experience for cohesive  network access security. This is a hands-on senior engineering role with platform level accountability across the Netskope stack.   This position sits at the intersection of network security, data protection, and enterprise connectivity in a heavily regulated GSiB financial services environment      Meaningful work is fueled by meaningful performance and career development conversations with your manager.  KEY ACCOUNTABILITIES Provide engineering and delivery support for Netskope SSE products across CASB, SWG, ZTNA, DLP, Private Access, and BWAN technologies.     Architect and deliver traffic steering & traffic engineering solutions at scale across IPsec, GRE tunnel termination, as well as implementing effective failover strategies utilizing SDWAN endpoints and transit connectivity    Assist in coordinated maintenance, platform optimization, and line of business specific tuning for performant traffic routing    Understanding a multi-WAN carrier topology – consisting of MPLS, Direct Internet Access DIA) and private MAN connectivity configurations as transit for steering   Proficient in SDWAN topologies (Cisco Catalyst SDWAN/Viptela, Aruba EdgeConnect, Silverpeak) used as terminating agents/steering control points for branch site traffic origination  Partner and collaborate on design and functionality of security platforms with Global Security Defence (GSD) across Identity & Access Management and DLP design considerations to serve the enterprise   Design and implement traffic steering using private line services (dark fiber, carrier interconnects, point to point circuits) using BGP   Provide escalation support to Network Operations organization for advanced troubleshooting of traffic routing, policy, user or system access issues in applications & systems   Bachelors degree in Computer Science or related degree type. Equivalent experience considered.   7+ years relevant experience in network security technologies – hands on in production deployments, operations, and build teams.   Deep understanding of Netskope steering architecture, real-time policy enforcement, the NewEdge network, and data plane/tunnel design.   Operational maturity in incident response workflow design, triage, and policy tuning   Strong foundation of Layer 2/Layer 3 network frameworks  Excellent understanding of TCP/IP networking and OSPF, BGP routing protocols. QoS configuration on routers and switches in