Senior Network Security Engineer

Company

SMS Datacenter is a growing IT MSP for Managed Services, Colocation, Networking, Private Managed Cloud, and Help Desk. We are a team of engineers and technicians who tackle new projects, challenges, and issues every day, designing and supporting users’ systems and networks so they can focus on their businesses. If you enjoy busy days of working with fellow IT professionals to solve problems and create long-term solutions, and you meet our open position's requirements, then apply to join the team!

Description

We are looking for a Senior Network Security Engineer to join our network engineering and design team. You should be strong in Palo Alto firewall security, Cisco switching, and enterprise network architecture. This is a fully remote position that is open to US citizens and other permanent residents residing in the US only. Working hours will follow UTC-7 business hours, with a rotating on-call schedule.

Responsibilities

• Configure and troubleshoot Palo Alto firewalls and other network devices
• Design and deploy functional networks (LAN, WLAN, WAN)
• Troubleshoot networks on internal and customer environments independently and with other engineers
• Implement customer services according to project requirements and best practices
• Translate security and compliance requirements into practical network architecture, configurations and documentation
• Support monitoring with SNMP and other products
• Create and maintain complete technical documentation, drawings, and SOPs
• Communicate with users and colleagues professionally
• Fully track time and work done on internal and customer tickets and projects
• Suggest improvements to network performance, capacity, and scalability
• Participate in rotating on-call and escalation schedules
• Perform other job-related duties as necessary

Requirements:

• 7+ years of professional network engineering experience, including at least 3 years designing and architecting enterprise network environments
• Strong experience designing and securing enterprise networks, including segmentation, VLANs/VRFs, routing, switching, firewalls, VPNs, wireless, and network access control
• Strong Palo Alto firewall experience, including security policies, NAT, segmentation, logging, and security services
• Experience with Cisco switching and routing and enterprise wireless, preferably Aruba
• Experience with Cisco ISE or equivalent NAC technologies, including 802.1X
• Experience troubleshooting complex Layer 2/3 and security/network infrastructure issues

Preferred Candidates Will Have:

• Experience designing and securing Azure network infrastructure and hybrid cloud connectivity
• Experience designing and implementing network security controls aligned with NIST 800 and/or CMMC requirements, including deep understanding of network segmentation, boundary protection, secure communications, access control, encryption, logging, monitoring, and secure system architecture
• Experience implementing controls for CUI environments and maintaining technical documentation/evidence supporting security assessments
• Ability to design network architectures that enforce least privilege, segmentation, secure management, and controlled communications
• Expertise with BGP design and support for multi-tenant environments
• Experience in MSP, multi-customer, or managed-services environments
• CCNP, CCIE, PCNSE, PCNSC, CISSP, or equivalent real-world knowledge

Compensation and Benefits:

Selected candidates' job grade and starting salary will be determined by the evaluation of factors including relevant technical and soft skills, knowledge, and geographic location. Total annual compensation for this position is expected to be $120,000 to $150,000.

Employees who complete the first 90 days of employment will be eligible for Paid Time Off of up to 10 vacation/personal days, 5 sick days, birthdays off, and 8 company holidays each year.