Principal Network Security Engineer
- Compensation
- Not disclosed
- Location
- Penang 15, Penang, Malaysia
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Not specified
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Must have
- 8+ years of progressive experience in enterprise networking and cybersecurity, including substantial experience designing security architecture for large, distributed environments.
- Demonstrated success serving as a principal engineer, architect, or senior technical authority for complex network-security programs and transformations.
- Proven ability to own technical outcomes from discovery and requirements through design, implementation guidance, validation, and operational transition.
Full description
Job Details:
##
Job Description:About the Role
This principal-level individual contributor serves as Altera’s senior technical authority for network security architecture and engineering. The role defines scalable security patterns, guides complex designs, and provides hands-on expertise to strengthen the resilience, integrity, and protection of Altera’s global infrastructure and data.
Department Description
Altera’s Information Security organization is responsible for:
- Incident response and digital forensics
- Threat hunting and event analysis
- Security policy, standards, and governance
- Risk assessments and advisory
- Security architecture and engineering support
- Threat detection, monitoring, and forensic capabilities
- Security awareness and education
- Endpoint, network, and cloud security
As Principal Network Security Engineer/Architect, you will shape, design, and improve the security of Altera’s on-premises, cloud, and hybrid network environments. You will operate as a hands-on technical lead and trusted advisor, influencing engineering teams through architecture, standards, technical decisions, and mentorship without direct people-management responsibility.
Technical Strategy & Architecture Ownership
- Define and evolve Altera’s enterprise network security strategy, target-state architecture, technical roadmap, and reusable reference patterns.
- Serve as the senior technical authority for complex network security decisions, design exceptions, and modernization initiatives.
- Drive adoption of Zero Trust, least-privilege access, micro-segmentation, and secure-by-design network principles.
- Establish architecture standards, decision criteria, and measurable outcomes for attack-path reduction, rule hygiene, segmentation coverage, resilience, and network visibility.
Network Security Architecture & Engineering
- Architect and review secure designs for data center, campus, laboratory, cloud, WAN, remote-access, and hybrid environments.
- Design segmentation and traffic-control models using security zones, VRFs, next-generation firewalls, secure routing, identity-aware access, and workload-level controls.
- Evaluate and guide adoption of ZTNA, SWG, SASE, SD-WAN, NDR, IDS/IPS, firewall, and network-security automation capabilities.
- Partner with network, cloud, platform, product security, and operations teams to translate security requirements into implementable designs.
- Validate architecture through design reviews, configuration analysis, packet and flow analysis, resilience testing, and post-implementation verification.
- Conduct ongoing firewall administration and operations including policy lifecycle management, rule administration, hardening, and exception governance.