Network Security Tech Lead

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

Job Description About the Role Network Security Tech Lead is responsible for both leading and delivering enterprise network security operations. This role combines strategic leadership with hands-on technical execution to protect Mattel’s global network infrastructure across on-premises and cloud environments. The position oversees and contributes to the work of Network Security Engineers and Administrators, ensuring robust firewall, email, and web security, as well as Public Key Infrastructure (PKI) management and compliance with enterprise security standards. The Tech Lead will drive delivery of secure, resilient, and scalable network security services while also acting as a subject matter expert (SME) and escalation point for complex troubleshooting, incident response, and architecture initiatives. This role requires deep technical expertise in Palo Alto Networks technologies, cloud security platforms, PKI, and WAF solutions, along with a commitment to operational excellence and continuous improvement. Roles and Responsibilities Provide direct technical leadership and guidance to Network Security Engineers and Network administrators, ensuring delivery of secure and reliable network protection across enterprise and cloud infrastructures. Lead and actively participate in the deployment, operation, and optimization of Palo Alto Networks (PAN) firewalls (hardware and virtual), Prisma Access, GlobalProtect, and related services. Oversee configuration management, performance tuning, and security policy enforcement across global firewall environments. Manage and maintain enterprise Public Key Infrastructure (PKI), including certificate lifecycle management with tools such as Keyfactor, Venafi, or equivalent, and integrations with external Certificate Authorities (GlobalSign, Entrust, DigiCert). Lead configuration, customization, and maintenance of Web Application Firewalls (WAF) (e.g., Imperva) to safeguard applications and APIs, resolving rule conflicts and performance issues. Oversee Email Security Gateways (e.g., Checkpoint Harmony, Proofpoint) and related O365 mail routing and DNS security configurations. Participate in high-severity incident response, threat mitigation, and root cause analysis alongside infrastructure and SOC teams. Develop and maintain operational runbooks, standard operating procedures (SOPs), and technical documentation to support security operations, compliance, and audit readiness. Drive continuous improvement in firewall automation, rule optimization, and network visibility using modern tools and analytics. Collaborate with enterprise architects, SOC teams, and application owners to align network security initiatives with business and compliance objectives. Lead or contribute to design discussions, roadmap planning, and implementation of emerging technologies such as Zero Trust network architecture and cloud-native security controls. Mentor engineers, foster professional growth, and promote a culture of accountability and delivery excellence. Participating in after-hours support rotation for major outages or critical incidents as needed.

Required: 10+ years of experience in Network Security operations, including at least 5 years in a tech lead role or senior engineering capacity