Network Security Engineer

Responsibilities:


•    Provide technical security and leadership on large network deployment projects.
•    Create configuration files and templates for network firewalls and security devices.
•    Configure policies and Access Controls to ensure data protection.
•    Determines and predicts impact of any assigned network moves, additions, changes, and decommissions.
•    Works on configuration tasks aimed at standardizing switch and router configuration settings per hardware and software platform.
•    Effectively communicates status, issues, and risks to implementation schedules.
•    Works on second and third level problems that require troubleshooting and root cause analysis skills.
•    Works with vendors.
•    Participates in an off-hours support "on-call” rotation.
•    Design solutions that are scalable based on requirements provided.
•    Operations:
•    Capable of understanding and following enterprise change control policies.
•    Troubleshoot network deployment and configuration issues.
•    Documentation:
•    Develops clear and concise documentation of complex scope.
•    May develop user documentation.
•    Contributes to the documentation of the design for networks.
•    Customer Service:
•    Maintains good relationships with customers, peer technical groups and other IT organizations / groups.
•    Works closely with IS colleagues on all tasks in network engineering.
•    Participates in user requirement discussions.

Qualifications:


•    Familiar with Layer 2 and Layer 3 protocols.
•    Expertise in Palo Alto and Cisco ASA security appliances (hardware and virtual).
•    Excellent written and oral communication skills.
•    Qualified consultants have three to five years of related experience.
•    A Bachelor's Degree in a relevant field is also required; ideally, this degree is in Computer Science.
•    Excellent analytical and troubleshooting skills are essential to success.
•    Will need advanced expertise with TCP / IP networking concepts.
•    Knowledge of authentication protocols (including RADIUS and LDAP), and Network Management Systems (EMS / NMS) is required.
•    CCNA-level mastery of BGP, EIGRP, OSPF, STP, TCP, UDP, NAT, HSRP / VRRP, VRF, QoS, Ethernet, Inter- and Intra-domain multicast is essential.
•    This position also requires experience working with Cisco, Arista, and Client networking product as well as solid experience with packet tracing / sniffing tools.
•    Hardware Platforms: Palo Alto 3k / 5k / 7k series FWs. Cisco 9500, 9300, Arista 7xxx series multi-layer switch / routers


Preferred Skills:


•    Palo Alto FWs (Panorama / Log Collectors / Cloud based FWs), Palo Alto VPNs)
•    Cisco ASA VPN Appliances
•    Routing / Switching
•    Splunk / SIEM