This role pays more than
60%
of similar roles. Most pay
$144,375–$203,125
— the shaded band above.
At the midpoint, this role pays about
$181k
versus about
$174k
for comparable roles.
Based on 240 similar postings.
Employer
About Nordstrom
Nordstrom is a leading American luxury department store chain offering a wide selection of clothing, shoes, accessories, and beauty products through its stores, Nordstrom Rack outlets, and online. Industry: Luxury Department Store Retail
Nordstrom currently has
30 open roles
on FindRole.
Listed pay typically runs
$142,000–$220,500
across 29 roles with salary data.
Sr. Network Security Engineer joins the NIO organization to design, operate, and automate network security controls across enterprise, cloud, and retail edge environments. This role involves implementing zero-trust network access policies, microsegmentation, and perimeter security while building automation pipelines for firewall rule lifecycles and compliance validation using an infrastructure as code approach. The engineer serves as a subject matter expert for authentication and authorization frameworks including 802.1X, EAP-TLS, RADIUS, ClearPass, and certificate management. Key technologies include Palo Alto Networks, Zscaler, and cloud-native firewalls across AWS, Azure, and GCP. Required skills include Python, Terraform, Ansible, and GitOps workflows to manage security policy as code. The role addresses the challenge of securing multi-cloud environments and retail infrastructure while ensuring high delivery velocity through automated security integration at the network layer.
Design, deploy, and operate network security controls across enterprise, cloud (AWS, Azure, GCP), and retail edge environments.
Implement and maintain zero-trust network access (ZTNA) policies, microsegmentation, and perimeter security using tools like Zscaler and Palo Alto Networks.
Build and maintain automation pipelines for security policy management, firewall rule lifecycles, and compliance validation using Infrastructure as Code.
Serve as a subject matter expert for authentication and authorization frameworks including 802.1X, EAP-TLS, RADIUS, and certificate management.
Monitor, triage, and respond to network security events while performing root cause analysis and remediation.
Author engineering documentation, threat models, security runbooks, and architecture reviews.
Mentor other engineers on security best practices and automation patterns across the organization.
Participate in an on-call rotation for critical security infrastructure.
What we're looking for
Bachelor's or master's degree in Computer Science, Engineering, Cybersecurity, or equivalent education and experience.
7+ years of progressive enterprise security engineering experience with depth in network security domains.
Hands-on experience with cloud security architecture across at least two major platforms (AWS, Azure, GCP, OCI).
Proficiency in automation and Infrastructure as Code using Python, Terraform, Ansible, or equivalent tools.
Expertise in network security technologies including Palo Alto firewalls, Zscaler, IDS/IPS, and DDoS mitigation.
Strong knowledge of authentication and authorization protocols such as 802.1X, EAP-TLS, RADIUS, and PKI certificate management.
Foundational networking knowledge including TCP/IP, BGP, SD-WAN, VLAN segmentation, and routing protocols.
Relevant certifications such as PCNSE, CCNP Security, AWS/Azure Security Specialty, or CISSP.
Microsoft 365
Exchange Online
Azure
PowerShell
Microsoft Graph API
Active Directory
Entra ID
SharePoint
Teams
Azure Automation
Power Automate
Azure Logic Apps
GitHub
SMTP
DNS
SPF
DKIM
DMARC
New Relic
Proofpoint