Network Security Engineer

Network Security EngineerLocation: New York, NY - 3x/week onsitePosition Description: This highly motivated position requires a network security engineer with a strong, broad background in network security design and technologies with specific focus on network access control (NAC). The position is in support of the network access control squad with a primary focus to design and certify network access control solutions before deploying across the Firm. The role will require detailed and clear documentation and effective communication to enable close collaboration across multiple cross-functional teams at **. Responsibilities:Execute certification tests of Network Access Control (NAC) solutions and monitoringCollaborate with cross-functional teams to discuss and design the integration.Create network diagrams and related documentation.Present certification results, respective design change and solutions to wide audience, including peers in technology and senior management.Create new operational procedures and run books.Independently and methodically work through problems and have a level of rigor around decision making and documentation.Collaborate with project managers and members of the enterprise networking, enterprise computing, end-user computing, and tech risk organizations.Required Skills:Experience with Network Access Control (NAC) technologies, including 802.1x, MAC Authentication Bypass (MAB) and TrustSec, on vendor products like Cisco Client, Forescout or ArmisExperience with Cisco access switching and wireless platform, including Cisco Catalyst switches and Wireless LAN controllers (WLC)Experience with design and execution of test or certification process based on business or technical requirementsAssist monitoring and troubleshooting of networking issuesLarge-scale network security design and documentation, including in the financial industryBasic networking knowledge, e.g. networking protocols, TCP/IP, RADIUS, etc.Desired Skills:Experience with UNIX/Linux administrationStrong design and architecture mindset, e.g. configuration schema design, process re-engineering, and automationNetwork automation and scripting (Python, Ansible, bash/shell scripts, integration with third-party vendor APIs)Solid knowledge in development practices, e.g.