Network Security Tech Lead

About the Role

Roles and Responsibilities

• Provide technical leadership and guidance to network security engineers and administrators.
• Lead deployment, operation, and optimization of Palo Alto firewalls, Prisma Access, GlobalProtect, and related services.
• Oversee firewall configuration management, performance tuning, and security policy enforcement.
• Manage enterprise PKI, certificate lifecycle management, and integrations with external certificate authorities.
• Lead WAF configuration and maintenance, including resolution of rule conflicts and performance issues.
• Oversee email security gateways, Office 365 mail routing, and DNS security configurations.
• Participate in high-severity incident response, threat mitigation, and root cause analysis.
• Maintain runbooks, standard operating procedures, and technical documentation for operations, compliance, and audits.
• Drive firewall automation, rule optimization, and network visibility improvements.
• Collaborate with architects, SOC teams, and application owners on security initiatives.
• Contribute to architecture discussions, roadmap planning, and Zero Trust or cloud-native security implementations.
• Mentor engineers and participate in after-hours support for major outages or critical incidents.

Required Qualifications

• At least 10 years of network security operations experience, including at least 5 years in a tech lead or senior engineering capacity within a large enterprise.
• Proven expertise with Palo Alto Networks firewalls, Prisma Access, GlobalProtect, and related security platforms.
• Experience managing WAF, email security, and PKI environments with Azure, AWS, or GCP integrations.
• Proficiency in firewall rule optimization, troubleshooting, and automation.
• Deep understanding of network protocols, VPNs, RADIUS/TACACS+, and cloud networking architectures.
• Familiarity with Windows and Linux systems administration and integration.
• Experience supporting SOX, NIST CSF, PCI, or similar compliance and audit initiatives.
• Strong leadership, communication, and decision-making skills, including mentoring and managing technical teams.
• Ability to collaborate effectively with cross-functional teams and vendors.

Preferred Qualifications

• Bachelor’s degree in information technology, cybersecurity, or a related discipline.
• Certifications such as PCNSE, CCNP Security, CCSP, or GIAC.
• Experience with ServiceNow ITSM processes and workflow automation.
• Familiarity with Zero Trust Network Access and SASE frameworks.
• Scripting and automation experience with PowerShell, Python, or REST APIs.

Work Approach

• Mattel describes its work model as combining purposeful in-person collaboration with flexibility to support performance, connection, and wellbeing.