IT Security Engineer, Staff

Design, configure, deploy, monitor, and troubleshoot production network infrastructure and associated services

Develop and implement network security policies and procedures

Design and implement campus and datacenter macro & micro-segmentation policies

Utilize automation tools and scripts to standardize deployment configurations and environments

Monitor and analyze networks for potential security threats and vulnerabilities

Manage network security infrastructure includingSASE, firewalls, VPNs,and ZTA solutions

Help maintain and advance Zero Trust Architectureadoption

Develop and enforce best practice security standards, compliance, and governance

Conduct external and internal security audits and assessments to identify potential risk and vulnerabilities in the network infrastructure adhering to industry standard cybersecurity frameworks

Stay up to date on emerging network security threats and proof of concepts

Identify and solve problems related to overall security infrastructure performance, efficiency, and availability in a timely manner

Create and maintain documentation of network security designs, processes, and procedures

Regularly review firewall, VPN, and web content filtering configuration and rules to ensure optimal efficiency and adherence information security standards.

Actively participate with internal and external auditors during examinations, providing support and assistance in addressing audit recommendations.

Contribute innetwork and security support ticketing and provide timely resolution for end user issues

Participate in an on-call rotation

4 + years of experience working on current bleeding edge technology Gartner leaders

Bachelor’s degree or equivalent work experience

Proficient in network configuration management and automation tools (Python, Ansible)

Familiar with RestAPI automation and configuration management secure coding

Strong attention to details: Keen eye for detail and be able to identify potential vulnerabilities and threats

Strong analytical and problem-solving skills

Experience with MFA, SSO, SAML deployment

Certifications such as PCNSE, ZIA/ZPA, CCNP, CCDP, CCIE, CISSP, CCDE, CEH, CISSP, Security+ or equivalent work experience is a big plus

Familiar with Cisco ACI and application service chaining

Familiar with Clearpass NAC

Deep understanding of network security systems and protocols such as IPSec, IKE, GRE, TACACS, RADIUS, 802.1x, OSPF, DMVPN, BGP, SD-WAN

Experience with configuring and troubleshooting Cisco, Ivanti, Versa, and Aruba devices

Experience with configuring Palo Alto,Zscalerand SASE solutions

Ability to analyze network packet captures

Ability to work after hours to support projects and maintenance activities.

Well-versed with automation and scripting tools such as Python and Ansible

Ability to create best practicesecure environment diagrams and documentation

Ability to quickly learn new or unfamiliar technology and products using documentation and internet resources.

Strong verbal, written interpersonal and communication skills.

Must be fluent in English

Strong organizational skills with the ability to work on multiple projectsand tasks

Experience troubleshooting networking in Linux (RHEL, CentOS or Ubuntu)

Cloud experience in GCP, Azure and AWS

Experience with working in a global team environment and solving problems independently.

Master’s degrees in Network or Computer Engineering, Computer Science, Cybersecurity