Network Security Engineer

This position will provide network, application and cloud security operational expertise while collaborating with other information technology teams. This role is responsible for administering security applications and network systems in a large, distributed enterprise.

Responsibilities (include but not exclusive to the following):

·        Team member responsible for the design, installation, configuration, maintenance, and break/fix of security infrastructure and their corresponding application components.  This individual will provide direction, recommendations, design, and implementation for security enhancements and posture of existing and future solutions.

·        Ensure network security design, controls, processes, and standards are aligned with overall accepted IT security practices.  Maintain vendor technology best practices and standards.    

·        Provide operations and engineering support for critical network and application security systems and services including AV, IDS/IPS, DLP, Anti-Malware, content/URL filtering, compliance/standards, vulnerability, threat detection, VPN and security event management.

• Proactively maintain, monitor, and improve our network and application security with timely incident detection and response.
• Partner with security and technical teams to design, deliver and maintain highly available, performance and cost-effective network and application security system and services.
• Write and contribute to project plans, author network and application security engineering level documentation, and develop detailed test plans.
• Participate in IT Security assessments, risk analysis and reporting.
• Provide on-call and after-hours coverage as necessary.  Travel as required to Data Center facilities for equipment upgrades, maintenance, etc.

Key Skills:

·        Cisco, Fortinet and SANS network security certifications preferred or equivalent work experience.

·        BA/BS degree required

·        CCNA, CCNP, NSE4 and/or a minimum of 3-5 years of experience providing network and application security administration services in a business-critical environment.

·        In-depth knowledge of IPS/IDS, NextGen firewalls, VPN, IPSEC/SSL, DLP, data encryption, SIEM appliances, and multi-factor authentication systems.

·        Demonstrated skillset of routing protocols (BGP, OSPF, EIGRP), static routing and L2/L3 switching.

·        Experience with network access control, dot1X and MAB is required.

·        Experience with managing content/URL filtering and DNS layer protection required

·        Strong understanding / experience with network infrastructure and intent based networking

·        Fortinet product line experience (Fortigate, FortiSwitch, FortiManager, FortiAnalyzer, FortiSandbox, FortiSIEM) is desired

·        Threat Detection, mediation, and ability to automate processes is a plus

·        Ability to learn new technologies and adopt new security tools

·        Ability to multitask in a fast-paced environment

·        Strong organizational skills, excellent communication, people skills and ability to work independently and as part of a team