Principal Network Security Engineer

Principal Network Security Engineer

Position Overview Autodesk is seeking an experienced Principal Network Security Engineer to lead the design, architecture, and maturity of our global network security infrastructure and its security posture. In this role, you'll set the strategic direction for network security, drive improvements across our cloud and hybrid networks, implement foundation controls and partner with key stakeholders in our Enterprise IT organization to deliver Trust outcomes.

Responsibilities

• Design, architect, and plan strategy for deployment of Security technologies in a complex and distributed network infrastructure to mitigate risks

• Design, implement and manage scalable security controls on network security for Zero Trust Network Access (ZTNA), SASE, Intrusion Detection Systems, and auditing tools in both public and private cloud infrastructures

• Design, implement and manage scalable security controls for web application firewalling, bot protection, content redirection and manipulation in a hybrid public/private cloud

• Manage Security policies, standards and reviews of network segmentation and other cloud-based network services

• Develop and implement security protocols and procedures to prevent and mitigate potential threats in a cloud environment

• Support with responding to security breaches promptly, conduct thorough investigations, and propose long-term solutions at a network level

• Provide technical leadership and guidance in cloud network security matters

• Collaborate with cross-functional teams to ensure network security aligns with business objectives

• Work closely with all Trust stakeholders for alignment on design and strategy

• Develop automations to improve operational efficiency

• Support compliance and regular security audits, generate reports for evidence, and provide recommendations for improvements

• Stay abreast of the latest security trends, threats, and mitigation techniques

• Minimum Qualifications

• At least 8 years of network security experience, with a strong emphasis on cloud environments

• Expertise in cloud platforms like AWS, Azure, or Google Cloud and Security capabilities offered by these platforms

• Knowledge of routing, load balancing and edge or perimeter network capabilities in cloud environments

• Proven experience with security technologies (firewalls, intrusion detection systems, SASE, NAC, WAF, DDoS protection etc.)

• Deep understanding and experience with DNS, NTP, BGP, OSPF, MPLS, VPN, SD-WAN, and other critical protocols

• Network monitoring and analytics tools (NetFlow, sFlow, packet analysis)

• AI/ML-powered network security — covering anomaly detection, threat prediction, automated remediation, and intelligent analytics

• Network configuration management and automation — covering IaC, Ansible, Terraform, GitOps, and NetOps/AIOps platforms

• Strong knowledge of cybersecurity principles and best practices

• Familiarity with Security and Privacy compliance standards (SOC2, ISO 27001, NIST, GDPR, FedRamp etc.)

• Bachelor's degree in computer science, Cybersecurity, or a related field. Advanced degrees or certifications (CISSP, CISM, etc.) are a plus

• Preferred Qualifications

• Ability to influence stakeholders internal and external to Trust with design proposals and strategic recommendations

• Excellent problem-solving and analytical skills

• Strong communication and interpersonal skills

• Ability to work independently and manage multiple tasks simultaneously