Senior Lead Engineer, Cybersecurity, Network Security

Work Flexibility: Hybrid

Position Summary

Designs, implements, and supports enterprise network security technologies that protect organizational infrastructure from cyber threats — managing firewalls, secure remote access, network segmentation, intrusion prevention, secure DNS, VPN, and cloud networking security in partnership with infrastructure and cybersecurity teams.

What will you do:

• Design, engineer, and continuously improve enterprise network security solutions protecting Internet-facing, extranet, third-party, and internal environments, including next-generation firewalls, VPN, IDS/IPS, secure web gateways, DNS security, NAC, DDoS protection, and micro-segmentation.
• Develop secure network architectures supporting data centers, cloud environments (AWS, Azure, Google Cloud), remote workforce connectivity, and manufacturing locations.
• Partner with Enterprise Architecture to align network designs with Zero Trust principles and enterprise cybersecurity standards.
• Engineer secure network segmentation strategies, security zones, and trust boundaries for Internet-facing applications, DMZs, extranets, third-party connectivity, and internal environments to reduce attack surfaces and limit lateral movement. Develop, review, and optimize firewall policies, security rules, access control lists, and routing configurations per corporate standards.
• Perform network security assessments, configuration reviews, and architecture evaluations to identify gaps and recommend improvements.
• Lead implementation of new network security technologies, platform upgrades, migrations, and infrastructure modernization initiatives.
• Monitor network security platforms, investigate security events, and support Security Operations during incident response and containment.
• Partner with Vulnerability Management to remediate infrastructure vulnerabilities and apply timely patches and firmware updates.
• Develop automation using scripting, APIs, and infrastructure-as-code to improve operational efficiency.
• Create and maintain network security standards, architecture diagrams, engineering documentation, procedures, and configuration baselines.
• Evaluate emerging network security technologies, vendor solutions, and industry best practices.

What you need:

• Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering, or a related discipline required; Master's degree preferred.
• Certifications preferred: CCNP Security, CCIE Security, Palo Alto PCNSE, Fortinet NSE, Check Point CCSA/CCSE, CISSP, or equivalent.
• Advanced training in enterprise and cloud networking, Zero Trust Architecture, software-defined networking, firewall engineering, and secure network design preferred.

Qualifications & experience

• Minimum 6 years of enterprise network security experience.
• Experience designing or reviewing DMZ, extranet, Internet-facing application, and third-party connectivity architectures, including security zones, trust boundaries, firewall policy, permitted traffic flows, management access, encryption, and compensating controls.
• Administering Palo Alto, Cisco, Check Point, Fortinet, or similar firewall technologies.
• Experience with VPN, IDS/IPS, NAC, DNS security, and cloud networking.
• Experience supporting Azure, AWS, or Google Cloud networking.
• Knowledge of routing, switching, TCP/IP, DNS, DHCP, and network protocols.
• Familiarity with NIST CSF and CIS Controls.

Travel Percentage: 10%

Stryker is one of the world’s leading medical technology companies and, together with its customers, is driven to make healthcare better. We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes. We are proud to be named one of the World’s Best Workplaces! For more information, visit: www.stryker.com

Work Flexibility

• Remote – Role allows you to work the majority to 100% of time from an alternate workplace. These roles could have travel expectations, and you must work within the country of the job requisition location.

• Field-based – You can expect to regularly work a majority to 100% of time at customer facilities and has a set territory or expectation to travel within a set boundary. Almost all sales roles would likely be qualified as field-based.

• Onsite – Role is 100% located at a Stryker facility. Some ad hoc flexibility may be available depending on role, level, and job requirements. Manufacturing roles and any role that requires physical presence at the office would qualify under this category.

• Hybrid – You can expect to regularly work in both an alternate workplace and a Stryker facility. Roles that are partially remote or co-located would qualify as hybrid, and the expectation to be onsite would be defined and agreed upon by your manager/supervisor.