Senior Security Network Engineer

Summary

Join Xero's Corporate Network team as a Senior Security Network Engineer and make a significant impact on our global network infrastructure. You will be hands-on, solving problems related to firewalls, SASE, ZTNA, WiFi, LAN switching, and WAN. Develop, implement, and manage secure network architectures while automating security configurations and infrastructure-as-code practices. Perform routine assessments, optimize network devices, and lead incident response efforts. Collaborate with various teams and vendors, providing coaching and mentorship. Success involves deploying and optimizing SASE, ZTNA, and SD-WAN solutions, enforcing Zero Trust principles, and ensuring compliance with SOC2 and ISO 27001.

Requirements

• Strong engineering experience in network security, cloud-based security solutions, and Zero Trust architectures
• Experience with well known products in the field of VPN, Firewalls, Switches, Routers and Wireless Controllers and Access Points
• Deep understanding of network security compliance frameworks (SOC2, ISO 27001, NIST, CIS Benchmarks)
• Excellent grasp of modern software delivery practices and life cycle
• Strong stakeholder management skills, with the ability to influence without authority and align security priorities with business needs
• Proficiency in scripting and automation (Python, Terraform, or other infrastructure-as-code tools)
• Ability to design secure, scalable, and resilient network architectures in a fast-paced environment
• Strong incident response and troubleshooting skills, ensuring rapid recovery and remediation of network security threats
• A growth mindset, continuously learning and adapting to emerging network security threats and technologies
• Experience working in high-availability network security environments, balancing BAU operations with project-driven security initiatives
• Strong understanding of network and system administration security

Responsibilities

• Develop, implement and manage scalable, reliable and secure network architectures such as SASE, ZTNA, DLP, CASB, SWG and SD-WAN
• Assess, design and enforce security protocols to protect the network from potential threats and meet compliance requirements (SOC2 and ISO27001)
• Automate security configurations and infrastructure-as-code (IaC) practices to reduce operational overhead and improve reliability
• Perform routine assessments and optimize network devices (firewall, switches, access points) to enhance performance and reliability
• Perform capacity planning and implement upgrades to accommodate future network growth
• Drive troubleshooting efforts and manage incident response to minimise downtime and disruptions to Xero’s operations
• Ensure network documentation is up to date along with periodic reviewing of network configuration and analyzing performance reports
• Engage in stakeholder and relationship management, working closely with security, IT, work experience teams and associated vendors
• Apply a strong background in supporting high-availability network security for BAU operations and delivering solutions in project-driven environments
• Lead incident response efforts related to network security breaches, misconfigurations, and policy violations, ensuring minimal downtime and risk exposure
• Provide coaching and mentorship, helping teach small groups of engineers and contributing to Xero's shared knowledge base
• Participate in the 24/7 on-call roster as required

Preferred Qualifications

Experience using network tools and SD-WAN would be advantageous

Benefits

• Very generous paid leave to use however you’d like (plus statutory holidays!)
• Dedicated paid leave to care for your physical and mental wellbeing as well as an Employee Assistance Program to access mental health care for you and your family
• Free medical insurance
• Wellbeing and sports programmes
• Employee resource groups
• 26 weeks of paid parental leave for primary caregivers
• An Employee Share Plan
• Beautiful offices
• Flexible working
• Career development