Network Security Engineer

Join Heritage Bank as the force behind secure banking operations. This Minnesota-based Network Security Engineer role is a high-impact opportunity for a skilled technical leader to own network performance, strengthen cybersecurity controls, and help protect the integrity, availability, and resilience of our technology environment.

Position Summary

The Network Security Engineer is responsible for the design, implementation, security, and maintenance of the bank’s network and IT infrastructure. This role ensures the confidentiality, integrity and availability of bank systems in alignment with regulatory expectations. This is a hands-on technical role with full ownership of network operations and cybersecurity controls, working closely with the VP of Information Technology to support secure and reliable banking operations.

Core Responsibilities

Network Infrastructure Management

• Design, implement, and maintain LAN/WAN infrastructure across headquarters, branches, and remote locations 
• Manage routers, switches, firewalls, VPNs, and wireless networks 
• Monitor network performance and proactively address capacity, reliability, and latency issues 
• Manage MPLS, SD-WAN, and secure remote access solutions 
• Support connectivity for core banking systems, online/mobile banking platforms, and third-party vendors

Security & Compliance

• Implement and maintain secure network architectures aligned with banking regulatory requirements (e.g., FFIEC guidance) 
• Manage firewalls, intrusion detection/prevention systems (IDS/IPS), and network access controls 
• Conduct regular vulnerability assessments and remediation efforts 
• Support audits and examinations by internal auditors and regulatory agencies 
• Maintain documentation for compliance and security standards 
• Administer user access controls and permissions
• Oversee the patching strategy

Monitoring & Incident Response

• Utilize network monitoring tools to ensure uptime and performance 
• Lead troubleshooting efforts for network outages and service disruptions 
• Participate in incident response, root cause analysis, and post-incident reporting 
• Maintain and test disaster recovery and business continuity network components 

Project Leadership

• Lead or contribute to IT infrastructure projects, including upgrades, migrations, and new branch deployments 
• Evaluate and recommend new technologies to improve performance, security, and scalability 
• Assist in evaluating and onboarding new vendors and monitoring providers for performance and risk

Documentation & Standards

• Maintain accurate network diagrams, configurations, and procedures 
• Establish and enforce network standards and best practices 
• Provide technical guidance to junior IT staff 

Bank Standards

At Heritage Bank, we are committed to a customer-centric, service-driven culture. We operate under the following core standards:

• Mission: Help people succeed financially.
• Ethics: Always do the right thing. 
• Solutions: Bring innovative solutions to challenges. 
• Ownership: Take accountability and learn from our mistakes. 
• Positivity: Bring energy and enthusiasm to everything we do. 

Compensation & Benefits

Get ready to be rewarded! This position provides an annual salary range of $63,400 to $95,100. Full-time team members enjoy a comprehensive benefits package including paid time off, paid holidays, and even paid volunteer days. Your health is covered with medical, dental, and vision insurance, plus plan for your future with our 401(k) and ESOP retirement plans. Enjoy additional benefits and incentives consistent with our company policy. Join us and discover how rewarding your career can be!

Disclaimer

This job description outlines the general nature of the role and is not intended to be all-inclusive. Duties, responsibilities, and benefits may change as business needs evolve. Employment is at will, meaning either the employee or the Company may end the employment relationship at any time, consistent with applicable law.  

We are an Equal Opportunity Employer and value diversity at all levels of the organization.

Qualifications

Education & Experience

• Bachelor’s degree in information technology, Computer Science, Cybersecurity or related field (or equivalent experience) 
• 5+ years of experience in: network engineering, IT infrastructure or cybersecurity operations. Preferably in financial services or a regulated industry. 

Technical Skills

• Strong knowledge of routing and switching (Cisco, Aruba, or similar) 
• Experience with firewalls (e.g., Fortinet, Palo Alto, Cisco ASA) 
• Familiarity with VPNs, VLANs, QoS, and network segmentation 
• Understanding of cloud networking (Azure/AWS)
• Knowledge of cybersecurity principles and frameworks 

Key Competencies

• Strong problem-solving and analytical skills 
• Ability to work independently and manage multiple priorities 
• Excellent communication skills for both technical and non-technical stakeholders 
• High attention to detail and commitment to security and compliance 
• Proactive mindset with a focus on continuous improvement 

Work Environment & Expectations

• On-call availability for critical incidents and maintenance windows 
• Occasional travel to branch locations 
• Ability to work in a fast-paced, highly regulated environment