Network Security Engineer II

Description

Network Security Engineer II

Direct Hire 1099 or W2 only. 

The client is not offering subcontracting for this position.

This role is located either in Irving, TX or Enon, OH. Hybrid schedule- must be onsite 3-5 days per week.

[11580]

Job Summary:



You will not see any vendor names in the responsibilities listed below. We are more interested in aptitude and attitude than specific OS experience. Let us know your history, but of more interest is your grasp of technical concepts, not specific user interfaces. We want team members who will take ownership of issues and drive them to resolution, not simply perform tasks as assigned. You will work with subject matter experts (SME) on behalf of our customers (other business units within our client), to ensure their projects and deployments succeed with appropriate security posture, in a timely manner. You must have a passion for learning new technologies, not simply working with what you already know. You will be provided with the tools to produce your own career success, but should exercise initiative to seize them and create that success. You will be challenged in a fast-paced environment, but success in handling these challenges will not go unnoticed or unrewarded.

Candidates MUST have experience deploying and managing Palo Alto Firewalls in Cloud environments.

Requirements

Responsibilities:

You will be a member of a team responsible for all aspects of Network Security. You are expected to continue developing your professional knowledge of security concepts and apply company policies and procedures to resolve a variety of issues of moderate scope in appropriate ways, in all of the following domains. As an engineer, you will receive general technical direction for all but complex tasks, with more detailed guidance on new assignments:

• Firewalls and network filters, in both Enterprise, Stores, and cloud networks
• Intrusion Prevention policies
• Site-to-site and remote-access VPN connectivity
• Network Access Control
• Authentication, Authorization and Accounting (to include multi-factor authentication)
• Web access proxy servers and URL filtering
• PKI and certificate issuance and management
• DNS Security
• Threat research, vulnerability remediation, and creation of compensating controls
• Network Security policy creation, exception documentation and approval
• Management of multi-factor authentication tokens
• Participate with team lead/manager in creating your professional development and training plan.
• Prioritize taskings and projects assigned based on importance to accomplishment of business objectives. Seek assistance from senior teammates as needed.
• Solve issues of moderate complexity and scope where analysis of situations and data requires a review of a variety of identifiable factors. Exercise judgment within defined procedures and practices to determine appropriate actions.
• Work on projects with senior engineers, in an effort to advance partnership opportunities between Network Security team and other business areas. 
• Implement compensating controls and mitigations to identified security risks.
• Assist in performing network security platform testing, vulnerability remediation, and operating system hardening to reduce attack surface.
• Maintain network security policies, standards, processes and workflows.

Requirements:

Education/Experience



• Bachelor’s Degree in Computer Science, Information Technology, Information Security, or equivalent
• 3 years of related experience or Bachelor’s in related field

Certification/Licenses

Must have: At least one entry-level vendor certification in the Networking or Network Security arenas (Palo Alto PCNSA/PCNSE required, Cisco CCNA/CCNP (Security preferred), Juniper JNCIA/JNCIS (-SEC preferred), etc.) or one entry-level vendor-neutral certification in the Information Security arena (GICF, GSEC, CISA, CEH, etc.)

CANDIDATES MUST HAVE EXPERIENCE DEPLOYING AND MANAGING PALO ALTO FIREWALLS IN CLOUD ENVIRONMENTS. SUBMISSIONS NOT CLEARLY INDICATING SUCH EXPERIENCE WILL NOT BE REVIEWED. THANK YOU!