IT Security, Sr. Staff 

Roles & Responsibilities

• Design, configure, deploy, monitor, and troubleshoot production network security infrastructure and associated services.
• Design and implement network security standards and access controls following NIST frameworks.
• Develop and implement network security policies and procedures.
• Aid with designing and implementation of campus and datacenter macro & micro-segmentation policies.
• Utilize automation tools and scripts to standardize deployment configurations and environments.
• Maintain vulnerability management processes and policies using a risk-based priority methodology.
• Monitor and analyze networks for potential security threats and vulnerabilities.
• Manage network security infrastructure including SASE, firewalls, VPNs, and ZTA solutions.
• Help maintain and advance Zero Trust Architecture adoption.
• Develop and enforce best practice security standards, Firewall rules, compliance, and governance.
• Analyze external and internal security audits/assessments and plan/provide solutions to mitigate.
• Stay up to date on emerging network security threats and proof of concepts.
• Create and maintain documentation of network security designs, processes, and procedures.
• Identify and solve problems related to overall security infrastructure performance, efficiency, and availability in a timely manner.
• Contribute to network and security support ticketing and provide timely resolution for end user issues.
• Participate in an on-call rotation.
• Knowledge on quantum resistant encryption and migration plan

Key Skills

• 10+ years of experience working on current bleeding edge technology Gartner leaders. 
• Bachelor’s degree or equivalent work experience
• Proficient in network configuration management and automation tools (Python, Ansible, Terraform)
• Familiar with RestAPI automation and configuration management secure coding
• Strong analytical and problem-solving skills 
• Strong experience with Zero-Day mitigation/remediation
• Experience with MFA, SSO, SAML deployment.
• Certifications such as PCNSE, ZIA/ZPA, CCNP, CCDP, CCIE, CISSP, CCDE, CEH, CISSP, Security+ or equivalent work experience is a big plus. 
• Familiar with Cisco ACI contracts and service graphs to insert FWs or NLBs as needed.
• Network Access Control, 802.1x, RADIUS and TACACS using Aruba Clearpass or Cisco ISE
• Deep understanding of network and security protocols such as IPSec, IKE, GRE, DMVPN, BGP, SD-WAN, OSPF
• Experience with configuring and troubleshooting Cisco, Ivanti, Versa-Networks, and Aruba devices.
• Experience in conducting vulnerability scans and knowledge of industry standard scoring models such as CVSS, CCSS
• Operationalizing MITRE Attack & TTPs in vulnerability prioritization
• Demonstrated experience and success with development and promulgation of enterprise-class security policy and standards.
• Strong familiarity with OWASP Top 10, SANS/CWE Top 25 software security vulnerabilities
• Experience with configuring Palo Alto, Zscaler and SASE solutions.
• Ability to analyze network packet captures.
• Well-versed with automation and scripting tools such as Python and Ansible
• Experience troubleshooting networking in Linux (RHEL, CentOS or Ubuntu)
• Ability to create best practice processes, secure environment diagrams and documentation.
• Strong verbal, written interpersonal and communication skills. 
• Strong organizational skills with the ability to migrate between tasks.
• Strong technical security mindset, and ability to present to higher management as needed.

Bonus Qualifications

• Experience with JS frameworks such as Angular or React
• Cloud experience in GCP, Azure and AWS 
• Experience with working in a global team environment and solving problems independently.
• Master’s degree in electrical or computer engineering, Computer Science, Cybersecurity