Job Description:
Building trusted markets - powered by our people
At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We providethe financialinfrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe deliverscutting-edgetrading, clearing and investment solutions to market participants around the world.
We'rebuilding meaningful ways to support professional and personal development while strengthening the trustwe'veearned as a global market leader. Our teams are empowered to share ideas, actively pursuethemand bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to "go for it" and equip our managers with the training to coach their teams to the next level. We strive to provideemployeesa safe space to network, shareideasand create opportunities.
PLEASE NOTE: To support strong partnership and team connection, this role follows a four day in office work model - in either our Overland Park, KS or Chicago, IL office.
The Network Security Team is seeking a Sr. Network and Firewall Security Engineer to secure andoperateconnectivity across global offices and data centers. This is a hands-on role requiring deepexpertisein Palo Alto firewalls, including design, deployment, migration, and ongoing optimization of security policies in complex enterprise environments. The engineer will partner across infrastructure teams to ensure secure,highly availableconnectivity, while also supporting internal and external stakeholders with a strong service mindset. Candidates must be self-starters with strong critical thinking skills, capable ofoperatingindependently and taking ownership of complex problems frominitialdetection through resolution.
This role requires advanced troubleshooting capabilities, including hands-on experience with Palo Alto CLI-based debugging typical of Tier 2/Tier 3 TAC scenarios, as well as strong foundational networking knowledge across routing protocols and packet-level analysis. The ideal candidate is a natural communicator who can drive problem resolution in large, cross-functional settings, clearly articulate technical findings, and influence outcomes across engineering, security, and operations teams. Success also requires the ability to communicate effectively with seniorleadership-translating deep technical issues, risks, and trade-offs into concise, actionable insights-while mentoring junior engineers and helping elevate the overall capability of the team.
Your responsibilities will be:
Design, deploy, and migrate Palo Altofirewallsolutions across global environments, including architecture of security policies, segmentation, SSL decryption, and centralized management
Lead complex security and network integrations by applying strongcore networking principles(BGP, OSPF, routing design, failover, traffic engineering) to ensure resilient, high-performance connectivity
Partner with network, cloud, and infrastructure teams to design and implement secure, scalable connectivity across on-prem and hybrid environments
Serve as a senior escalation point, driving advanced troubleshooting acrossfirewalls and underlying network infrastructure, including deep packet, flow, and session-level analysis
Support network security operations and incident response, diagnosing complex connectivity issues involving routing, NAT, policy enforcement, and application behavior
Mentor engineers and NOC staff, reinforcing strong networking fundamentals, structured troubleshooting, andoperational bestpractices
7+ years of network and security engineering experience across enterprise routing, switching, andfirewallplatforms, with strong foundations in secure connectivity and network design
5+ years of hands-on experience managing Palo Alto firewalls, including SSL decryption, security profiles, and Panorama-based centralized management (required)
Strong,demonstratedexperience designing and troubleshooting complex network and security environments, including routing protocols (BGP, OSPF), NAT, and packet-level analysis in production environments
Strong understanding of network security design principles, including segmentation, access control, and secure architecture patterns (zone-based design,microsegmentation, zero-trust concepts)
Experience acrossadditionalenterprise networking platforms and edge technologies, including Arista or similar environments, proxy platforms, load balancers (e.g., F5), and multi-vendor infrastructure
Familiarity with modern application and container networking models, including Kubernetes networking, segmentation, and network policies
Benefits and Perksof working for Cboe Global Markets
We value the total wellbeing of our people - including health, financial,personaland social wellness. We believe standard benefits like health insurance and fair pay area givenatany organization. Still, you shouldknowwe offer:
Generous paid time off, including vacation, personal days, sickdaysand annual community service days
Some of our associates' favorite benefits andperksinclude:
More About CboeGlobal Markets
We'rereimagining the future of the workplace by focusing on what matters most, our people. Our journey is an inclusive one.We'reinvesting deeply in leadership programs and career development initiatives that ensure everyone has an equal chance to succeed.
We work with purpose, solving problems with ingenuity, collaboration, and a lot of passion.We'rean engaged and excited team connecting markets across borders and embracing growth in all its forms to achieve incredible outcomes.
Learn more about life at Cboe onour websiteandLinkedIn.
Equal Employment Opportunity
We're proud to be an equal opportunity employer do not discriminate against any employee or applicant for employment based on any legally protected characteristic, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, orVeteran status. We are committed to fostering a workplace where all individuals are valued and respected.
#LI-CP2
This position is not eligible for visa sponsorship. Candidates must be legally authorized to work in the United States without the need for employer sponsorship now or in the future.
Salary Ranges (applicable for US locations only)
At Cboe, we are committed to providing a competitive, transparent, and marketinformed total rewards program. The anticipated base salary range for this role is $119,000-$169,400, with actual compensation determined by jobrelated factors such as skills, relevant experience, education, internal alignment, and location.
This role may also be eligible for annual incentive compensation and, where applicable, participation in Cboe's long-term equity programs.
Additional information about Cboe's total rewards program, including benefits and other compensation components, can be found here: Total Rewards at CBOE.
Any communication from Cboe regarding this position will only come from a Cboe recruiter who has a @cboe.com email or via LinkedIn Recruiter. Cboe does not use any other third party communication tools for recruiting purposes.