Senior Network Security Engineer

Company Description

Zayo provides mission-critical bandwidth to the world’s most impactful companies, fueling the innovations that are transforming our society. Zayo’s 141,000-mile network in North America and Europe includes extensive metro connectivity to thousands of buildings and data centers. Zayo’s communications infrastructure solutions include dark fiber, private data networks, wavelengths, Ethernet, and dedicated Internet access. Zayo serves wireless and wireline carriers, media, tech, content, finance, healthcare and other large enterprises.

Zayo is seeking a Senior Network Security Engineer who will be responsible for protecting Zayo computer networks from cybersecurity attacks and unauthorized access. The Senior Network Security Engineer helps implement, manage, and monitor network technical and administrative controls like proxies and network firewalls to protect the confidentiality, integrity, and availability of the organization’s information assets. The Senior Network Security Engineer will predominantly engage in cybersecurity engineering activities that may include POCs, designing, implementation and operationalization of new technologies that improves Zayo’s security posture. They would also be responsible for defining service roadmaps and maturity targets for our network security technologies and processes. Partners with IT and Cybersecurity architects and engineers, working groups, project teams and application owners to support business and regulatory objectives.

Responsibilities: 

• Play a meaningful role in crafting, implementing, and maintaining the infrastructure and systems that support our organization's network and firewall governance environment.

• Collaborate with cross-functional teams to ensure smooth deployments, automate processes, and optimize performance to meet our security and networking needs.

• Performs network security, compliance, and risk assessments on projects throughout project lifecycle.

• Collaborates and participates on identification of security needs & recommends plans/resolutions.

• Implements, tests & monitors network security improvements.

• Maintains visibility inside & outside of info security at an Engineering professional level.

• Collaborate with groups such as infrastructure & design, end user support, service desk, development teams, etc.

• Help deliver scalable and secure network policy & management solutions across the organization.

• Network Security Infrastructure Design and Implementation: Design and implement the infrastructure required to support our FW governance and network environment.

• Collaborate with network infrastructure and security teams to architect scalable and highly available security solutions.

• Configure and deploy network security components such as VPN, web security, data loss prevention, cloud application security, and SSL inspection.

• Continuous Integration and Deployment: Establish and maintain a robust and efficient CI/CD pipeline for deploying network security and firewall governance updates and configurations.

• Automate the deployment process, including testing, monitoring, and rollback mechanisms in collaboration with network infrastructure teams.

• Continuously improve the deployment pipeline to enhance efficiency and reduce downtime.

• Configuration Management: Develop and maintain configuration management processes, policies, and tools for managing network security configurations.

• Ensure consistency and version control across the firewall and network infrastructure.

• Implement, automate configuration changes and enforce compliance with security policies and standards.

• Monitoring and Performance Optimization: Implement monitoring solutions to proactively determine and resolve issues within the network security environment.

• Monitor system performance, network traffic, and security events.

• Optimize network security performance through capacity planning, load balancing, and fine-tuning configurations.

• Incident Response and Troubleshooting: Collaborate with security and network teams to investigate and resolve incidents related to the network security platform.

• Troubleshoot issues with connectivity, performance, and security.

• Develop and maintain runbooks and playbooks for incident response and recovery procedures.

• Security and Compliance: Work closely with security teams to ensure network & firewall configurations align with security policies, standard processes, and regulatory requirements.

• •Implement security controls, access management, and encryption mechanisms as needed.

• Partnership and Documentation: Collaborate with cross-functional teams, including network engineers, security analysts, and developers, to ensure smooth integration of Zscaler into the overall infrastructure.

• Document system configurations, procedures, and troubleshooting guidelines.

• Share knowledge and deliver training to team members on network security operations and standard processes.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, programming, database administration, or a related field.

• Possession or progress towards certifications such as CISSP, CISM, ISC2, ISACA, SANS GIAC, CompTIA, ITIL.

• Minimum of five (5) years experience in info security technology or related field.

• Minimum of three (3) years experience working in a large enterprise.

• Minimum of three (3) years experience with network security & governance tools across multiple vendor platforms such as Palo Alto, Cisco, zScaler, Fortinet.

• Knowledge of programming languages (C/C#/Java/Javascript.)

• Industry certifications such as Network+, Security+, SANS, CEH.

• Familiarity with implementation of various threat modeling approaches pertaining to one or more of the following STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile Application threat model, Cyber Threat Tree, and data flow diagram.

•  Self-motivated, able to work under pressure, and multitask.

•  Strong problem solving / troubleshooting skills.

•  Ability to plan, organize and prioritize tasks to complete independently; Ability to work under pressure and meet tight timelines.

•  Knowledge of current technological trends and developments in the area of info & network security.

•  Presentation skills to large and small audiences.

•  Knowledge of federal & compliance regulations e.g SOX, PCI & CPNI.

•  Knowledge of Scripting tools (Python/Perl/Shell/HTML/PHP.)

• Strong written, verbal, and interpersonal communication skills; ability to communicate internally, upward, and cross functionally; ability to interface with cross-functional team members to gain support required to accomplish assignments; able to build coalitions.

Base Salary Range: $98,500 - $150,000 USD/annually, commensurate with experience.

#LI-NP1

Benefits, Rewards & Wellness

• Excellent Health, Dental & Vision Insurance

• Retirement 401(k) Savings Plan

• Fitness membership discounts

• Generous paid time off policy including paid parental leave

Zayo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, provincial or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.