Senior Network Security Engineer

Education :

• Bachelor's degree or equivalent experience in a related discipline is required.

• Certifications : Palo Alto, Cisco, or other advanced industry network/security /cloud certifications (PCNS E, CCNP, CISSP , CISM, CCSP, CCSK )

• Design and implement network security solutions within the enterprise datacenters and cloud platforms.

• Produce detailed designs and cost estimates for network security solutions, adhering to network architectural standards.

• Engage on Business Unit projects to elicit network requirements, specifications and project scope.

• Implement network security to company policy.

• Develop and document network operations and monitoring processes and procedures.

• Research and test network management and monitoring products and tools to maintain currency and enhance functionality.

• Provide Level 3 diagnosis and advanced troubleshooting when required, participates in on-call rotation.

• Perform short-term and long-term network security capacity planning.

• Prepare budgetary presentations for senior management.

• Participate in cross-training efforts with less experienced staff.

Position Requirements:

• 6+ years of experience working in complex IP network environments with heavy security focus.

• Significant experience designing, implementing, and maintaining network firewalls (Palo Alto / Cisco)

• Significant experience designing, implementing, and maintaining intrusion detection/prevention systems (Palo Alto / Cisco Firepower/FMC),

• Experience designing, implementing, and maintaining VPN Solutions (Pulse Secure, Global Protect, Meraki),

• Experience designing, implementing, and maintaining Identity Access/Multi-factor solutions (Cisco ISE, RSA, DUO, Okta), Network forensics (Wireshark, SIEM, packet capture, TCP/SSL dumps)

• Experience with NGFW Palo Alto/Panorama technologies: Threat Prevention, URL Filtering, Wildfire, Global Protect, DNS security.

• Advanced TCP/IP networking knowledge including security, sub-netting, switching, routing, load-balancing, and troubleshooting techniques.

Preferred Skills :

• Self-driven, strong motivational skills, high level of ownership, requiring minimal oversight.

• Effective communication skills: person in this role must be able to clearly and successfully communicate with management personnel, project managers, technical personnel, internal/external customers, and third parties.

• Strong analytical, design, engineering, planning and problem-solving skills.

• Strong presentation proficiency with MS Visio, PowerPoint, and Excel.

Additional Technical Skills:

• Working knowledge of ADCs such as F5 products (LTM, Big-IP DNS, ASM, APM, Big-IQ, etc), NGINX, and Citrix NetScaler appliances.

• Experience with web application firewalls (F5 ASM, NetScaler WAF, Imperva).

• Aruba ClearPass Access Management system deployment and support.

• Wide-ranging knowledge of Network Management tools and utilities.

• Familiarity with emerging network technologies: cloud adoption (providers Azure or GCP), containerization (Kubernetes), automation and orchestration (Ansible, Python, Terraform).