Network Security Engineer

Web Proxy and Content Filtering Service Request Engineer, Core Technology Infrastructure

Leads and/or participates in the design, development, and implementation of complex system engineering activities involving cross-functional technical support, systems programming and data center capabilities. Responsible for components of highly complex engineering and/or analytical tasks and activities. Establishes input/output processes and working parameters for hardware/software compatibility, coordination of subsystems design, and integration of total system. Viewed as a technology subject matter expert; able to provide and communicate complex technology solutions across differing audiences including technical, managerial, business executives, and/or vendors. Will have responsibility for multiple, complex projects; will direct activities of teams related to special initiatives or operations and may have direct reports. Leads the resolution process for complex problems where analysis of situations or data requires an in-depth evaluation of various factors. Exercises judgment within broadly defined practices and policies in selecting methods, techniques, and evaluation criterion for obtaining results. Information Technology degree and/or technology certifications preferred or substantial equivalent experience. Typically 7-10 years of IT experience.

The Web Content Filtering Engineer will be responsible for providing network service request engineering support for Web Content Filtering/Proxy and Threat/Malware infrastructure for the Client. Responsibilities will include request fulfillment and change execution as part of a larger team that is responsible for the health and welfare of the Bank's Web Content Filtering/Proxy and Threat/Malware infrastructure.

Key Responsibilities:

• Create, peer review, and implement proxy/malware designs based on service requests
• Leverage designated tools and resources to create technical designs that will drive implementation during a pre-approved change window as necessary
• Create, modify and represent appropriate configuration changes required to restore service on incidents in adherence to the Bank's Change Management procedures
• Responsible for Service Request Fulfillment including analysis of the incoming Request to better understand the customer's business & technical needs, prioritizing dates, scheduling and executing the required changes
• Collaborate with other internal/external Bank teams such as Network Operations, Engineering and Architecture, and clients on core configuration design requirements/standards and impact assessment
• Perform design validation testing and pre-work in non-production environments when necessary to ensure successful implementation in production
• Communicate the status and progress to the customer on a daily basis via the Bank's systems of record and respond to requests and incidents in adherence to standard SLAs
• Fulfil requests in alignment with Bank standards and guidelines – including, but not limited to Change Management and Design Peer reviews
• Provide resolution and implementation support, as needed, in coordination with vendors and Bank teams
• Collaborate with Bank teams and customers, internal or external, to ensure design solutions are aligned with corporate security baselines with seamless transition and delivery of new systems or upgrades to production support teams and suppliers.

Required Skills:

• 3-5 years of experience directly managing Web Content Filtering/Proxy infrastructure in forward and reverse proxy configurations.
• At least 5 years of experience directly managing Network Security infrastructure and technologies such as firewalls, content inspection, malware inspection or similar
• Advanced experience managing, configuring and troubleshooting Radware, Alteon and FireEye content inspection technologies
• Excellent customer facing communication skills in English, customer support and knowledge of ITIL best practices
• Knowledge of authentication protocols such as Kerberos, LDAP, IWA, IWA-direct, SSO, Active Directory.

Desired Skills:

• 6-8 years of continuous expertise in Network Operations, Information Security, Cyber Security or similar Network Security fields providing Request, Incident, Change and Problem Management support
• Experience with Bluecoat Management Center, Bluecoat ProxySG, BCAAA is a plus
• Experience with McAfee Web Gateway, McAfee DLP is a plus
• Experience with F5 SSLO is a plus
• Experience with Netskope is a plus
• Strong analytical, troubleshooting and problem-solving skills and ability to collaborate with other technical areas to define complex configuration designs
• ITIL certification preferred
• At least one professional level certification in Web Content filtering technologies, Network Security or Networks such as CCNA Security, CCNP, BCCPA, BCCPP, CISSP, CCSP, CEH, is desirable.

Technology Infrastructure Organization:

• Strives to bring new thoughts and ideas to teams in order to drive innovation and unique solutions
• Excels in working among diverse viewpoints to determine the best path forward
• Experience in connecting with a diverse set of clients to understand future business needs – is a continuous learner
• Commitment to challenging the status quo and promoting positive change
• Participate in and drive collaborative efforts to advance tools, technology, and ways of working to better serve an evolving client base
• Believes in value of diversity so we can reflect, connect and meet the diverse needs of our clients and employees around the world