New York Life Insurance Company
Senior Associate - Security Engineer
New York Life Insurance Company, New York, New York, us, 10261
Location Designation
Hybrid - 3 days per quarter. As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting‑edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth — driving the company's success. Role Overview
The Security Engineer will play a key role in designing, engineering, and maintaining NYL’s cloud and network security capabilities across hybrid environments. This role blends hands‑on engineering with solution architecture, ensuring that network and cloud controls are robust, scalable, and aligned with enterprise standards. The engineer will support both on‑premises and cloud platforms—primarily AWS—integrating modern security solutions into NYL’s infrastructure and application ecosystems. The ideal candidate will bring technical depth across cloud networking, zero trust, and automation, with a strong learning mindset and enthusiasm for innovation. What You’ll Do
Engineer, configure, and maintain enterprise network cloud security solutions. Design and implement cloud‑native network architectures in AWS using services such as VPC, Transit Gateway, PrivateLink, Network Firewall, WAF, and GuardDuty. Develop and manage segmentation strategies (e.g., Illumio, microsegmentation, Zero Trust principles) to prevent lateral movement and contain threats. Engineer and maintain secure connectivity solutions, including Zscaler, SWG, ZTNA, VPN, and enterprise firewalls (e.g., Palo Alto, Fortinet). Implement and tune cloud security posture management (CSPM), cloud workload protection (CWPP), and AWS Config Guardrails. Integrate network telemetry and cloud logs into enterprise SIEM and threat detection systems. Automate security control deployment using Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation). Collaborate with architecture and application teams to embed security into cloud and network design patterns. Support data protection objectives through encryption, tokenization, and secure network routing for sensitive data flows. Contribute to the development of Zero Trust architectures, secure edge connectivity, and hybrid network modernization initiatives. Stay informed about emerging threats, technologies, and AWS security capabilities; recommend improvements to evolve NYL’s security posture. What You’ll Bring
Bachelor’s degree in Computer Science, Information Systems, or equivalent experience. 5+ years of hands‑on experience in network or cloud security engineering roles. Proven ability to design, deploy, and operate secure hybrid network environments (on‑premises + AWS). Deep understanding of AWS security services (IAM, VPC, NACLs, Security Groups, WAF, Network Firewall, GuardDuty, CloudTrail, KMS). Experience with secure connectivity platforms (Zscaler, SWG, ZTNA, VPN, firewalls) and segmentation technologies (Illumio, VLANs, SDN). Strong grasp of Zero Trust networking concepts, PKI, and modern security protocols (SPIFFE, DCR, PKCE). Experience automating security operations through scripting or infrastructure‑as‑code (Python, PowerShell, Terraform). Understanding of regulatory frameworks and compliance requirements (NYS DFS, NIST CSF, CIS, ISO 27001). Preferred Qualifications
Experience designing and implementing Zero Trust architectures at scale. Proficiency with AWS networking and security architecture design patterns, including Transit Gateway, Control Tower, and multi‑account segmentation. Familiarity with CSPM and CWPP platforms (e.g., Prisma Cloud, Wiz, Orca). Experience integrating security into CI/CD pipelines and DevSecOps workflows. Knowledge of encryption technologies, HSMs, and key management systems. Exposure to securing containers, serverless, and edge environments. Experience with AI‑assisted security tools or cloud‑based behavioral analytics. Relevant certifications: AWS Security Specialty, AWS Advanced Networking, Zscaler ZCCP, Palo Alto PCNSE, CCSP, CISSP‑ISSAP. Pay Transparency
Salary Range: $121,000–$172,500. Overtime eligible: Exempt. Discretionary bonus eligible: Yes. Sales bonus eligible: No. Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program. Company Overview
At New York Life, our 180‑year legacy of purpose and integrity fuels our future. As we evolve into a more technology‑, data‑, and AI‑enabled organization, we remain grounded in the values that drive lasting impact. Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem‑solving, and purpose‑driven innovation. Here, you’ll find the rare balance of long‑standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress. As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it. Our Benefits
We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work. Click here to discover more about our comprehensive benefit options or visit our NYL Benefits Site. Our Commitment to Inclusion
At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities. Click here to learn more about New York Life’s leadership in this space. Job Requisition ID: 92842.
#J-18808-Ljbffr
Hybrid - 3 days per quarter. As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting‑edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth — driving the company's success. Role Overview
The Security Engineer will play a key role in designing, engineering, and maintaining NYL’s cloud and network security capabilities across hybrid environments. This role blends hands‑on engineering with solution architecture, ensuring that network and cloud controls are robust, scalable, and aligned with enterprise standards. The engineer will support both on‑premises and cloud platforms—primarily AWS—integrating modern security solutions into NYL’s infrastructure and application ecosystems. The ideal candidate will bring technical depth across cloud networking, zero trust, and automation, with a strong learning mindset and enthusiasm for innovation. What You’ll Do
Engineer, configure, and maintain enterprise network cloud security solutions. Design and implement cloud‑native network architectures in AWS using services such as VPC, Transit Gateway, PrivateLink, Network Firewall, WAF, and GuardDuty. Develop and manage segmentation strategies (e.g., Illumio, microsegmentation, Zero Trust principles) to prevent lateral movement and contain threats. Engineer and maintain secure connectivity solutions, including Zscaler, SWG, ZTNA, VPN, and enterprise firewalls (e.g., Palo Alto, Fortinet). Implement and tune cloud security posture management (CSPM), cloud workload protection (CWPP), and AWS Config Guardrails. Integrate network telemetry and cloud logs into enterprise SIEM and threat detection systems. Automate security control deployment using Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation). Collaborate with architecture and application teams to embed security into cloud and network design patterns. Support data protection objectives through encryption, tokenization, and secure network routing for sensitive data flows. Contribute to the development of Zero Trust architectures, secure edge connectivity, and hybrid network modernization initiatives. Stay informed about emerging threats, technologies, and AWS security capabilities; recommend improvements to evolve NYL’s security posture. What You’ll Bring
Bachelor’s degree in Computer Science, Information Systems, or equivalent experience. 5+ years of hands‑on experience in network or cloud security engineering roles. Proven ability to design, deploy, and operate secure hybrid network environments (on‑premises + AWS). Deep understanding of AWS security services (IAM, VPC, NACLs, Security Groups, WAF, Network Firewall, GuardDuty, CloudTrail, KMS). Experience with secure connectivity platforms (Zscaler, SWG, ZTNA, VPN, firewalls) and segmentation technologies (Illumio, VLANs, SDN). Strong grasp of Zero Trust networking concepts, PKI, and modern security protocols (SPIFFE, DCR, PKCE). Experience automating security operations through scripting or infrastructure‑as‑code (Python, PowerShell, Terraform). Understanding of regulatory frameworks and compliance requirements (NYS DFS, NIST CSF, CIS, ISO 27001). Preferred Qualifications
Experience designing and implementing Zero Trust architectures at scale. Proficiency with AWS networking and security architecture design patterns, including Transit Gateway, Control Tower, and multi‑account segmentation. Familiarity with CSPM and CWPP platforms (e.g., Prisma Cloud, Wiz, Orca). Experience integrating security into CI/CD pipelines and DevSecOps workflows. Knowledge of encryption technologies, HSMs, and key management systems. Exposure to securing containers, serverless, and edge environments. Experience with AI‑assisted security tools or cloud‑based behavioral analytics. Relevant certifications: AWS Security Specialty, AWS Advanced Networking, Zscaler ZCCP, Palo Alto PCNSE, CCSP, CISSP‑ISSAP. Pay Transparency
Salary Range: $121,000–$172,500. Overtime eligible: Exempt. Discretionary bonus eligible: Yes. Sales bonus eligible: No. Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program. Company Overview
At New York Life, our 180‑year legacy of purpose and integrity fuels our future. As we evolve into a more technology‑, data‑, and AI‑enabled organization, we remain grounded in the values that drive lasting impact. Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem‑solving, and purpose‑driven innovation. Here, you’ll find the rare balance of long‑standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress. As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it. Our Benefits
We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work. Click here to discover more about our comprehensive benefit options or visit our NYL Benefits Site. Our Commitment to Inclusion
At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities. Click here to learn more about New York Life’s leadership in this space. Job Requisition ID: 92842.
#J-18808-Ljbffr