Network Security Engineer

Network Security Engineer

Key Duties, Accountabilities and Responsibilities:

• Works from established procedures with limited instruction.

• Assist in the development and enhancement of procedures.

• Performs moderately difficult assignments, requiring a great deal of originality and problem solving.

• Working knowledge of project management concepts; able to run small projects.

• Complies with information security policies.

• Exhibits regular, reliable, punctual and predictable attendance.

• Performs analysis of network security needs and contributes to design, integration, and installation of hardware and software.

• Day-to-day operational tasks such as firewall request and incident management.

• Designs and implements remote connectivity solutions including IPSec VPN, and SSLVPN.

• Provide security guidance and drive infrastructure decisions in collaboration with other technical and management teams, ensuring Security principles are being upheld.

• Development, deployment or administration of firewalls such as Palo Alto.

• Strong knowledge of network routing/switching (routing protocols, multicast, other LAN protocols).

• Advanced knowledge of layer 7 firewall technologies and capabilities (e.g. Application awareness, user identities, advanced threat detection, etc.).

• Conduct regular security assessments on controls and policies to iterate and improve the security posture.

• Drive/support global information security initiatives aimed at modernizing security tools and capabilities, reducing the organizations exposure and risks to network-based threats, and delivering quality information security in alignment with the organization’s goals.

Required Qualifications/Skills/Experience:

• Experience implementing network segmentation and security practices in the cloud.

• Proven ability to understand and implement complex network security concepts and technologies using (but not limited to):

o Palo Alto Networks Security Appliances (including Panorama)

o Remote Access VPN solutions (e.g. Global Protect)

o SDN technology – Cisco ACI, Silver Peak

o FireMon Security Manager (or similar firewall management/orchestration tool)

o AWS / Azure Cloud

o Network segmentation

o SSL Decryption

o Splunk

• Proven ability to understand and decode network traces and capture files.

• Proven ability to communicate in the written/spoken language with audiences of diverse technical understanding.

• Proven ability to be a self-starter with self-motivation for learning new technologies.

• Proven ability to quickly understand customer problems and how they relate to network/security infrastructure.

• Strong knowledge of network security, Palo Alto firewalls, intrusion detection systems, authentication mechanisms, encryption technologies, and networking protocols including SMTP, DNS, TCP/IP, and SNMP.

• Proven ability to navigate and understand AWS and Azure cloud environments.

• A four year computer science or related technical degree or equivalent work experience.