Network Security Engineer

Network Security Engineer

Primarily responsible for the day-to-day management of a large enterprise multi-vendor firewall environment. Interacts with business users and vendors to identify, define requirements, and expectations of new and existing network systems security needs. Participates in design, implementation, and troubleshooting process for complex firewall solutions. Assists in the development and strategy of network firewalls through system monitoring, maintenance, and system upgrades.

Work closely with other team members to design, build and maintain, new and existing network security technology. Create and deploy firewall standards for internet, datacenter, and cloud connectivity. Participate in Security & Network incidents, response, and remediation. Design, test, and deploy network & security solutions following the defined change control process. Requirements gathering, analyze, and propose solutions to networking security needs. Provides capacity planning for firewalls. Monitor, analyze, and report metrics of network firewall services. Completes work request activity submitted via Service Request System. Creates and maintains comprehensive documentation related to the network security infrastructure. Participates in on-call service rotation; provides 24 x 7 production support on a rotating basis. Performs occasional night/weekend work as required due to environment. Performs other duties as assigned. Complies with all policies and standards. Must abide by all requirements to safely and securely maintain Protected Health Information (PHI) for our patients. Annual training, the UH Code of Conduct and UH policies and procedures are in place to address appropriate use of PHI in the workplace.

Qualifications

Education: Bachelor's Degree preferably in Information Technology or related field with an interest in Information Technology Networks (Required) or 10 years of relevant working experience can be substituted in lieu of the degree (Required)

Work Experience: 10+ years Enterprise Network Security infrastructure, including design, implementation, and ongoing management and troubleshooting in a mid to large sized company (Required)

Knowledge, Skills, & Abilities: Palo Alto or similar enterprise grade firewalls. (Required proficiency) Cisco or similar enterprise grade switches and routers. (Required proficiency) Extensive experience with PAN Palo Alto Networks and Cisco firewalls Experience managing on-prem and cloud firewalls and utilizing security best practices Experience configuring, deploying, and supporting remote connectivity for client-to-site and site-to-site VPN Experience with firewall management tools and technologies such as, Panorama, Firemon, Prisma access, IPSec, Global Protect VPN, Cisco AnyConnect Experience with networking technologies is a plus; f5, Cisco, switching & routing, ACI, STP, EIGRP, OSPF, BGP, MPLS, TCP/IP, DHCP, DNS, end to end QOS, HSRP, VRRP, LACP, ACLs Practical experience in the use of network monitoring tools such as SolarWinds, Stealthwatch, LiveAction, Splunk, sylog-ng, Viavi, and Wireshark Licenses and Certifications: Cisco Certified Networking Professional (CCNP) CCNP Enterprise, CCNP Security, CyberOps Professional (Preferred Upon Hire) and Driver's License (Valid) with reliable transportation (Required) Palo Alto Preferred Certifications: PCNSE, PCCSE, PCSAE (Preferred Upon Hire)

Physical Demands: Standing Occasionally Walking Occasionally Sitting Constantly Lifting Rarely 20 lbs Carrying Rarely 20 lbs Pushing Rarely 20 lbs Pulling Rarely 20 lbs Climbing Rarely 20 lbs Balancing Rarely Stooping Rarely Kneeling Rarely Crouching Rarely Crawling Rarely Reaching Rarely Handling Occasionally Grasping Occasionally Feeling Rarely Talking Constantly Hearing Constantly Repetitive Motions Frequently Eye/Hand/Foot Coordination Frequently

Travel Requirements: 10%Primary Location: United States-Ohio-ClevelandWork Locations: 11001 Cedar Ave 11001 Cedar Ave Cleveland 44106