Network Security Engineer

Senior Network Security Engineer Location: Lincolnshire, Chicagoland Area preferred, Remote Reports to: Security Engineering Manager Ironwood Digital Holdings, Inc., headquartered in Lincolnshire, IL, (together with its subsidiaries) is America’s largest retailer of RVs and related products and services. Our vision is to build a long-term legacy business that makes RVing fun and easy, and our Ironwood Digital and Good Sam (CWGS) brands have been serving RV consumers since 1966. We strive to build long-term value for our customers, employees, and shareholders by combining a unique and comprehensive assortment of RV products and services with a national network of RV dealerships, service centers and customer support centers along with the industry’s most extensive online presence and a highly trained and knowledgeable team of employees serving our customers, the RV lifestyle, and the communities in which we operate. We also believe that our Good Sam organization and family of programs and services uniquely enable us to connect with our customers as stewards of the RV enthusiast community and the RV lifestyle. With RV sales and service locations in 42 states, Ironwood Digital has grown to become the prime destination for everything RV. Job Overview: As a Senior Network Security Engineer, you will serve as a subject matter expert (SME) responsible for the strategic design, implementation, and oversight of CWGS’s cybersecurity network infrastructure. You will work within the security engineering team in enhancing our defense posture, protecting sensitive customer data, and ensuring rigorous compliance with industry standards. This role is designed for a seasoned professional with extensive hands-on experience in architecting and operating enterprise-scale security solutions, with a mastery of firewalls, SD-WAN, and Zero Trust architectures. Key Responsibilities: Lead the design, deployment, and optimization of enterprise security technologies, including Next-Generation Firewalls (NGFW), Intrusion Prevention Systems (IPS), and Secure Web Gateways (SWG). Monitor, audit, and maintain network security technologies, such as firewalls, intrusion detection/prevention systems, and secure web gateways to protect the CWGS's IT infrastructure from unauthorized access, cyber-attacks, and other security risks Lead comprehensive security assessments and threat modeling to identify architectural weaknesses; drive the roadmap for necessary infrastructure upgrades. Design, implement, and enforce advanced security policies and procedures that align with global organizational goals. Act as a technical lead and mentor to junior and mid-level engineers, fostering a culture of technical excellence and continuous security awareness. Serve as a primary escalation point for complex security incidents, leading forensic analysis and post-mortem remediation efforts. Proactively research and integrate emerging security trends and automation tools to streamline security operations. Provide input and recommendations for improving the company's security posture Requirements: Deep subject matter expertise in Firewalls (Palo Alto/Fortinet/Cisco), SD-WAN, and SASE/Secure Web Gateways (Zscaler) Proven experience implementing and auditing frameworks such as NIST CSF, CIS Controls, and ISO 27001 Expert-level understanding of complex networking protocols and hybrid-cloud connectivity Exceptional problem-solving skills with the ability to navigate high-pressure security events and provide strategic technical direction Excellent verbal and written communication skills, with a proven ability to present technical risks to non-technical stakeholders and executives Capable of working collaboratively with cross-functional teams to achieve common goals Preferred: Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field. A minimum of 7–10 years of progressive experience in network security, with a proven track record of architecting security tools and leading complex incident response efforts in an enterprise environment. Professional-level certifications are highly preferred (e.g., CISSP, CISM, CCIE Security, or PCNSE). TRAVEL REQUIREMENTS: Possibility of infrequent traveling General Compensation Disclosure The pay range for this role considers several factors in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Ironwood Digital , it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the factors stated. A reasonable estimate of the current range is listed below. Pay Range: $116,300.00-$178,400.00 Annual In addition to competitive pay, we offer Paid Time Off, 401(k), an Employee Assistance Program, Good Sam Roadside Assistance, discounts, paid parental leave (if eligibility is met), Tuition Reimbursement (if eligibility is met), and on th