Network Security Engineer

Job Description:

Be responsible for supporting the planning, design, development and deployment enterprise network and security infrastructure solutions. Support the planning, architecture, and delivery of the enterprise-level security and network program including but not limited to the areas of SaaS / PaaS cloud deployments, data-center technologies, end-user and end-point protections. Generate and deploy solutions and policies in support of enterprise security and network technologies for the company and consumers. Design and implement security and network solutions that ensure appropriate controls and tools are selected and then operationalized. Work with application owners to integrate application security and application roles with security solutions. Work with management teams to develop, monitor and drive multi-year security and network infrastructure strategies.

Required Skills:

1. Excellent with EIGRP, and OSPF routing protocols.
2. Must be able to pass a TSA background check, and drive.
3. Knowledge of NX-OS, Cisco ISR, and Cisco ACI technologies.
4. Familiar with traffic protocols and ports and have an intermediate understanding of best practice network security.
5. Familiarity with SNMP, Solar winds, or equivalent Network Management platforms.
6. Knowledge (or ability to learn) of Cisco Stealth Watch, Cisco Flow Collector, Cisco Flow Sensor, NetFlow, Cisco DNS Umbrella, Cisco Firepower firewalls, Cisco ISE; ability to troubleshoot with Wireshark.
7. Able to configure Cisco switch ports as access ports, trunk ports, aggregation ports, port-security, and troubleshoot LAN security-related technologies.
8. Able to use ICMP and DNS tools and execute various show commands to ensure proper connectivity and operations.
9. Able to develop automation scripts or/and ensure proper network management and monitoring.

Responsibilities:

1. Configure, test, implement, and troubleshoot data network systems to support all aspects of the daily operations.
2. Troubleshoot EIGRP, OSPF, and BGP routing protocols, respond to security incidents, and address DWDM related issues.
3. Lead the design and support the implementation of network hardening tasks.
4. Design and daily support for remote locations using various platforms such as Cisco 3560, Cisco 4510R, Cisco 4506, Cisco 6509, Cisco 9300, Cisco 9400, Cisco ASA, and Cisco FirePower platforms.
5. Will be required to support various LANs, WANs, and a city-based fiber optic MAN.
6. Provide daily support for the Cisco Core, Server Farm, WAN, and Security modules.
7. Support and design regarding Nexus 7009, Nexus 5596, and Nexus 2232 platforms.
8. Open/Close trouble tickets (and change requests) for all assigned work
9. Assist in maintaining, configuring, installing, and testing network architecture, design, hardware, and software; Includes but not limited to routers, switches, and firewalls.
10. Experience in managing VMWare cluster virtualized environments with attached storage arrays, managing relational SQL databases, Linux/UNIX, and server hardware.
11. Experience with network routing, ACL’s and port filtering, subnetting, CIDR notation – IPv4 & v6.
12. Experience with building and managing Linux, Red Hat, CentOS.
13. Experience working with automation tools such as Ansible or Puppet.

Qualifications:

1. BS in Computer Science, Electrical/Electronics/Software Engineering or Information Technology.
2. At least 5+ years of network-related experience.
3. Experience creating and following change control-related processes.
4. Experience with device local authentication, TACACS+, or RADIUS authentication.