Senior Network Security Engineer

Overview

• Manage and maintain multi-protocol datacenter and backbone networks
• Define, and develop optimized network monitoring systems
• Design and deploy new network architectures
• Develop automated methods to mitigate and remediate network events
• Analyze data to diagnose and identify root causes to network issues
• Be an active participant in deep technical discussions
• Develop and maintain consistency within the networking infrastructure
• Working independently to solve multi-faceted problems

Functions

• Responsible for working in a 24x7 Security & Network Operation Center environment and participating in on-call rotation and normal ticketing procedures.
• Will participate in a rotating primary/secondary on-call for the Security & Network Operations Center 24x7.
• Passionate, trustworthy, team-player, who is positive minded with a can-do attitude and exceptional follow-through
• Articulate and experienced communicator with superb interpersonal, and documentation skills 
  • The ideal candidate is a self-starter that can jump into a support/engineering ticket queue and work issues to resolution with little oversight, ensuring that changes made are appropriately documented for future reference.
• Manage and maintain multi-vendor, multi-protocol datacenter and backbone networks
• Define, and develop optimized network/security monitoring systems
• Design and deploy new network architectures
• Develop automated methods to mitigate and remediate network events
• Analyze data to diagnose and identify root causes to network issues
• Be an active participant in deep technical discussions
• Develop and maintain consistency within the networking infrastructure
• Working independently to solve multi-faceted problems
• Networking – 8+ years of experience with expert level grasp of concepts as well as hands-on experience in networking and network technologies including Switches (L2), Routers / Routing (IP) / Routing Protocols (OSPF, BGP) and Internet-based network operations.
• Network Security – 8+ years of experience with expert level grasp of concepts along with hands-on experience in security including, access and application control, threat management (vulnerabilities, malware, APTs, botnets), understanding of various security and risk models, site and content categorization and SSL encrypt/decrypt functions.
• Strong understanding of common network protocols (TCP/IP, GRE, IPSec, BGP, OSPF, MPLS, VRRP, STP, IPsec, SNMP protocols)
• Strong understanding of Fortinet products and ecosystem is preferred.
• Carrier / ISP Routing – Expert level experience in building and managing large-scale BGP environments with publicly routable Autonomous Systems, Route Arbitration, Peering, IRRs, etc.
• Linux - 5+ years of experience with a strong grasp of concepts as well as hands-on experience in the administration of common Linux distributions (CentOS, Ubuntu, etc.) and Applications (Web Servers, SQL Databases, LDAP, etc.)  
  • Docker/Kubernetes, Orchestration (Salt/Concourse) experience is a plus.
  • Experience with Cloud providers (Google, AWS, Azure) is a plus.
• Experience with automation of network engineering tasks (Terraform/Ansible is a plus).
• Application Delivery – In-depth conceptual and hands-on understanding of availability technologies such as Load-Balancing, Denial-of-Service mitigation and prevention methodologies at-scale.
• Troubleshooting – Superb troubleshooting skills and root cause analysis capabilities
• Procedures & Documentation – Capability to document well as well as follow policies and procedures in day-to-day operations of security and networks operations.
• Status reporting & presentations
• Planning for long-range projects
• Preferred certification levels:  CCIE R&S, NSE7/8