Network Security Engineer

We are seeking a motivated and passionate Staff Network Security Engineer interested in joining our global network infrastructure support team responsible for designing, implementing, and maintaining a highly redundant and scalable secure network. You will also be part of a dynamic network engineering team that is responsible for designing and supporting all global network services including LAN, WAN, Data Center, remote access, wireless, and firewall security. We support a global data center footprint of over 10 megawatt of power, 12 Colo data centers, 10 on-Prem data centers and over 50K servers. This role is 20% datacenter and 80% Network Security Engineer

You will primarily be focused on improving the network security posture through new vendor solutions, implementing Zero Trust Architecture and best security standard practices. Synopsys is a growing global company that values Integrity, Execution Excellence, Leadership, and Passion. We are looking for candidates that embrace these same values and are interested in growing and learning with us.

This position requires living in Montreal within 30 minutes of our datacenter colo as part of the Datacenter Ops support role. You will be required to work at a Synopsys location 3 days/ week.

What You'll Be Doing

Network Security Roles

• Design, configure, deploy, monitor, and troubleshoot production network infrastructure and associated services
• Develop and implement network security policies and procedures
• Design and implement campus and datacenter macro & micro-segmentation policies
• Monitor and analyze networks for potential security threats and vulnerabilities
• Manage network security infrastructure including SASE, firewalls, VPNs, and ZTA solutions
• Help maintain and advance Zero Trust Architecture adoption
• Develop and enforce best practice security standards, compliance, and governance
• Conduct external and internal security audits and assessments to identify potential risk and vulnerabilities in the network infrastructure adhering to industry standard cybersecurity frameworks
• Identify and solve problems related to overall security infrastructure performance, efficiency, and availability in a timely manner
• Regularly review firewall, VPN, and web content filtering configuration and rules to ensure optimal efficiency and adherence information security standards.
• Contribute in network and security support ticketing and provide timely resolution for end user issues
• Participate in an on-call rotation

Datacenter Support Roles

• Management of hardware installs, moves and retirements
• Manage power and space capacity planning, build/expansion scoping
• Lead, direct, facilitate, and ensure implementation of site specific project
• Updating asset management tool to ensure accuracy and completeness

Key Skills:

4 + years of experience working on current bleeding edge technology Gartner leaders

• Bachelor’s degree or equivalent work experience
• Strong attention to details: Keen eye for detail and be able to identify potential vulnerabilities and threats
• Strong analytical and problem-solving skills
• Experience with MFA, SSO, SAML deployment
• Certifications such as PCNSE, ZIA/ZPA, CCNP, CCDP, CCIE, CISSP, CCDE, CEH, CISSP, Security+ or equivalent work experience is a big plus 
• Familiar with Cisco ACI and application service chaining
• Familiar with Clearpass NAC
• Deep understanding of network security systems and protocols such as IPSec, IKE, GRE, TACACS, RADIUS, 802.1x, OSPF, DMVPN, BGP, SD-WAN 
• Experience with configuring and troubleshooting Cisco, Ivanti, Versa, and Aruba devices
• Experience with configuring Palo Alto, Zscaler and SASE solutions
• Ability to analyze network packet captures
• Ability to work after hours to support projects and maintenance activities.
• Ability to create best practice secure environment diagrams and documentation
• Ability to quickly learn new or unfamiliar technology and products using documentation and internet resources.
• Strong verbal, written interpersonal and communication skills.
• Must be fluent in English
• Strong organizational skills with the ability to work on multiple projects and tasks

Bonus Qualifications

• Cloud experience in GCP, Azure and AWS 
• Master’s degrees in Network or Computer Engineering, Computer Science, Cybersecurity
• Knowledge of electricity, monitoring and HVAC systems

At Synopsys, we’re at the heart of the innovations that change the way we work and play. Self-driving cars. Artificial Intelligence. The cloud. 5G. The Internet of Things. These breakthroughs are ushering in the Era of Smart Everything. And we’re powering it all with the world’s most advanced technologies for chip design and software security. If you share our passion for innovation, we want to meet you.  

Inclusion and Diversity are important to us.  Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, military veteran status, or disability