Senior Consultant I - Network Security Engineering

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Job Description

Senior Consultant I - Network Security Engineering

Join our Network Security Engineering team and help secure and modernize critical enterprise infrastructure. As a Senior Consultant I, you will engineer, support, automate, and maintain network security platforms that protect the organization while improving reliability, scalability, and operational efficiency.

We're looking for an experienced engineer with a strong foundation in networking and network security who enjoys solving complex technical challenges and leveraging automation to drive better outcomes. You'll work with technologies such as enterprise firewall platforms, Infrastructure as Code, CI/CD pipelines, APIs, scripting, and automation frameworks to streamline operations and enhance platform performance.

This is a hands-on role for someone who takes ownership, works independently, and delivers high-quality engineering solutions with limited oversight. You'll troubleshoot complex network and security issues, implement infrastructure improvements, support automation initiatives, and contribute ideas that help advance the team's engineering practices.

Key Responsibilities

• Engineer, support, and maintain enterprise network security platforms, including Palo Alto Networks and related security technologies.
• Implement, test, and validate network security solutions across enterprise and cloud environments.
• Troubleshoot complex network, firewall, routing, connectivity, and application communication issues.
• Develop and maintain automation using scripting, APIs, Infrastructure as Code (IaC), and configuration management tools.
• Build and support CI/CD pipelines for infrastructure deployment, testing, validation, and configuration management.
• Create automated pre- and post-change validation processes to improve reliability, consistency, and operational efficiency.
• Integrate security platforms with monitoring, deployment, and operational tooling to enhance visibility and automation.
• Identify and automate repetitive operational tasks to reduce manual effort and improve platform scalability.
• Support platform lifecycle initiatives, including upgrades, vulnerability remediation, technology refreshes, and modernization efforts.
• Partner with network, cloud, security, and application teams to deliver secure, resilient, and scalable solutions.
• Contribute to technical reviews, process improvements, and engineering best practices while operating within established architecture and security standards.
• Develop and maintain technical documentation, operational procedures, scripts, and automation.
• Provide technical assistance and knowledge sharing to other members of the team.

Required Qualifications

• Strong background in network engineering and network security.
• Strong understanding of core networking technologies and concepts, including: TCP/IP, Routing, Subnetting, NAT, DNS, and application connectivity
• Experience engineering, implementing, or supporting enterprise firewall and network security platforms.
• Experience with Infrastructure as Code concepts, practices, and version-controlled infrastructure.
• Hands-on experience developing scripts and automation for infrastructure engineering and operational use cases, including areas such as: Infrastructure change implementation, Configuration management, Pre-change and post-change validation, Infrastructure monitoring and health checks, Data collection and reporting, Operational troubleshooting, API-driven infrastructure management
• Working knowledge of scripting or programming languages such as Python, PowerShell, Bash, or similar languages.
• Experience working with REST APIs or other programmatic interfaces to interact with and automate infrastructure platforms.
• Experience developing, maintaining, or working with CI/CD pipelines for infrastructure configuration and deployment.
• Experience using source control and version-control practices, such as Git-based development workflows.
• Experience troubleshooting complex infrastructure, network connectivity, and security issues.
• Ability to independently analyze technical requirements and implement solutions within established architecture and engineering standards.
• Ability to take ownership of assigned technical work and drive it through implementation and validation with limited oversight.
• Strong communication and collaboration skills with the ability to work across infrastructure, security, networking, cloud, and application teams.

Preferred Qualifications

• Hands-on experience with Ansible for infrastructure configuration, deployment, orchestration, or automation.
• Hands on experience with Palo Alto Networks Firewalls and Panorama or similar firewall platforms.
• Experience supporting network security infrastructure within AWS, Azure, or other public cloud environments.
• Strong understanding, VPN technologies, Network segmentation, and load balancing
• Experience with CI/CD and automation technologies such as Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps, or similar platforms.
• Experience developing reusable automation frameworks, modules, or tooling for infrastructure engineering.
• Experience working within enterprise change-management and IT service-management processes.
• Experience working in a DevOps or product-oriented engineering environment.
• Experience modernizing traditional infrastructure platforms through automation and Infrastructure as Code.

Skills

Automation, DevOps, Infrastructure As Code (IaC), Network Security Engineering, Palo Alto Networks Panorama, Red Hat Ansible

Compensation

Compensation offered for this role is 75,100.00 - 126,325.00 annually and is based on experience and qualifications.

The candidate(s) offered this position will be required to submit to a background investigation.

Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.

Allstate generally does not sponsor individuals for employment-based visas for this position.

Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.

For jobs in San Francisco, please click “here” for information regarding the San Francisco Fair Chance Ordinance.

For jobs in Los Angeles, please click “here” for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.

To view the “EEO Know Your Rights” poster click “here”. This poster provides information concerning the laws and procedures for filing complaints of violations of the laws with the Office of Federal Contract Compliance Programs.

To view the FMLA poster, click “here”. This poster summarizing the major provisions of the Family and Medical Leave Act (FMLA) and telling employees how to file a complaint.

It is the Company’s policy to employ the best qualified individuals available for all jobs. Therefore, any discriminatory action taken on account of an employee’s ancestry, age, color, disability, genetic information, gender, gender identity, gender expression, sexual and reproductive health decision, marital status, medical condition, military or veteran status, national origin, race (include traits historically associated with race, including, but not limited to, hair texture and protective hairstyles), religion (including religious dress), sex, or sexual orientation that adversely affects an employee's terms or conditions of employment is prohibited. This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.

Allstate provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse. Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs.

When working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload.

To help create a more personal and engaging experience, we ask that you join with your camera on if your interview is virtual. Please also have a Valid Photo Identification available at the start of your interview. If you require any accommodations or have questions ahead of your interview please reach out to your recruiter.

Note: Internal candidates are only asked to join on video; a Valid Photo Identification is not needed for the interview.