Network Security Engineer

Network Security Engineer Key Duties, Accountabilities and Responsibilities:

• Works from established procedures with limited instruction.
• Assist in the development and enhancement of procedures.
• Performs moderately difficult assignments, requiring a great deal of originality and problem solving.
• Working knowledge of project management concepts; able to run small projects.
• Complies with information security policies.
• Exhibits regular, reliable, punctual and predictable attendance.
• Performs analysis of network security needs and contributes to design, integration, and installation of hardware and software.
• Day-to-day operational tasks such as firewall request and incident management.
• Designs and implements remote connectivity solutions including IPSec VPN, and SSLVPN.
• Provide security guidance and drive infrastructure decisions in collaboration with other technical and management teams, ensuring Security principles are being upheld.
• Development, deployment or administration of firewalls such as Palo Alto.
• Strong knowledge of network routing/switching (routing protocols, multicast, other LAN protocols).
• Advanced knowledge of layer 7 firewall technologies and capabilities (e.g. Application awareness, user identities, advanced threat detection, etc.).
• Conduct regular security assessments on controls and policies to iterate and improve the security posture.
• Drive/support global information security initiatives aimed at modernizing security tools and capabilities, reducing the organizations exposure and risks to network-based threats, and delivering quality information security in alignment with the organization’s goals.

Required Qualifications/Skills/Experience:

• Experience implementing network segmentation and security practices in the cloud.
• Proven ability to understand and implement complex network security concepts and technologies using (but not limited to):

o Palo Alto Networks Security Appliances (including Panorama) o Remote Access VPN solutions (e.g. Global Protect) o SDN technology – Cisco ACI, Silver Peak o FireMon Security Manager (or similar firewall management/orchestration tool) o AWS / Azure Cloud o Network segmentation o SSL Decryption o Splunk

• Proven ability to understand and decode network traces and capture files.
• Proven ability to communicate in the written/spoken language with audiences of diverse technical understanding.
• Proven ability to be a self-starter with self-motivation for learning new technologies.
• Proven ability to quickly understand customer problems and how they relate to network/security infrastructure.
• Strong knowledge of network security, Palo Alto firewalls, intrusion detection systems, authentication mechanisms, encryption technologies, and networking protocols including SMTP, DNS, TCP/IP, and SNMP.
• Proven ability to navigate and understand AWS and Azure cloud environments.
• A four year computer science or related technical degree or equivalent work experience. Software Technology Inc