Network Security Engineer

SUMMARY:

Performs network and network security engineering, administration and support functions within the enterprise network infrastructure. The position is accountable for performing the analysis, design, implementation, administration, and maintenance on highly available network systems that meet business objectives and SLAs. Person within this position must be equipped and able to work in a dynamic and rapidly expanding environment.

This position will serve as part of a team of IT Network administrators and engineers who collectively demonstrate excellent technical competency, reliability in delivering mission critical infrastructure, and who continually ensure the highest levels of accessibility, optimization, and security.

Candidate must be local to San Francisco Bay area to physically support installations and troubleshoot incidents at the local office communication rooms and data centers. This position will require candidate to be on an onsite/remote rotation with a typical rotation of 3 days on site 2 days remote unless otherwise required.

ESSENTIAL RESPONSIBILITIES

• Support the Network Infrastructure environment with a service oriented approach and efficient delivery to meet customer needs, requirements, and their service expectations
• Work within established configuration and change management policies to ensure awareness, approval, and success of changes made to the network infrastructure
• Responsible for all engineering, design, deploying, troubleshooting, and administrating network infrastructure solutions (hardware and software) with a primary focus on:
• Network Security Services solutions (e.g. support of network security solutions throughout the entire Clients Network enterprise)
• Network DMZ/Extranet Services (setup, configure, troubleshoot, etc.)
• Remote Access / VPN Services (e.g. Cisco AnyConnect, etc.)
• User Internet Services (Proxy / Content Filtering, CASB, etc.)
• Automate network deployment and data collection tasks to enhance the productivity and validity of the results.
• Create and document Support Strategies ensuring the ongoing support expectations of all IT solutions aligns with the business expectations.
• Create and maintain comprehensive documentation for all implemented networks. Ensure relevant operational process, procedure, and policy documentation is effectively managed and the data required to support operations is complete and accurate in systems.
• Support of data centers and local communication rooms physical design and implementation including cabling and hardware installation as required. Candidate must be local to San Francisco Bay area to physically support installations and troubleshoot incidents at the local office communication rooms and data centers below:
• Be familiar and knowledgeable with:
• Layer 1 Data Center components (e.g. UPS systems, Power [voltage, KW, KVA, Power factor, etc.], PDUs, Data Center Cooling systems, Cabinets/Rack, Cabling [Cross Connect, Interconnect, ladder rack, fiber troughs, etc.]
• Assist with the design and installation of all systems being installed within the Data Centers.
• Select and implement security tools, policies, and procedures in conjunction with the companys security team
• Have excellent communications to act as a liaison with vendors and other IT personnel to resolve issues
• Lead problem management events and create root cause analysis documentation for upper management.
• Provide complex technical support to end-users.
• Identify and resolve security issues and vulnerabilities as required.
• Repair and remediate network incidents, problems, and security vulnerabilities in accordance with documented processes and SLAs.
• Perform network maintenance and system upgrades including patches, hot fixes and security configurations
• Monitor network performance and ensure system availability and reliability in accordance with documented processes and SLAs.
• Provide recurring Network Health reports with metrics supporting the report status.
• Perform configuration backups and disaster recovery operations
• Automate network monitoring and alerts triage as part of proactive approach to maintaining a high level of service.
• Develop testing platforms to detect network configuration inconsistencies before changes are made
• Automate network device provisioning processes, execute network changes and obtain data collection for reporting or analysis through the process.
• Develop and maintain tools to reduce down time in network operations, improve speed and accuracy of network changes, assist in diagnosis and remediation of advanced network problems and drive innovative solutions to reduce failures
• Set operational and project goals and work globally with cross-functional teams within and outside the organization to deliver business outcomes predictability across global sites. This also includes analysis around operational datasets to detect and inform the prioritization of problems to resolve. This often culminates in the creation and communication of aligned team projects, programs, and roadmaps.
• Identify improvement opportunities across policies, processes, and procedures to improve efficiency and quality of the activities. Drive standards across the network and ensure that we are fully compliant to those standards and policies.
• Participate in the global teams 24/7 on-call rotation with the goal of routing issues as needed and understanding how processes or tooling might be improved, skills can be developed, or automation can be implemented to prevent the need to escalate similar issues in the future.
• Assist with the design and deployment of new office openings from the ground up using network automation, and coordinating efforts with other departments to guarantee a smooth transition.
• Lead in developing the business justification, developing and documenting the design, and completing the installation of IT Infrastructure hardware and software as requested and/or required.
• Develop/create business justifications for recommended projects to be presented to upper management including the appropriate funding justification for the project.
• Identify tasks necessary to achieve project goals and provide work effort estimates.
• Project Manage the installation/implementation of IT network infrastructure projects using project management best practices
• Act as a technical vendor liaison while maintaining relationships with external suppliers and vendors
• Identifies and communicates IT Infrastructure needs and upon approval implements the new hardware/software solution to remediate the need.
• Perform performance monitoring, system tuning, and capacity planning to maintain optimal performance of systems.
• Develop and document standards, policies, and procedures for specific IT network environments along with system specifications, system design documentation, implementation processes, and operational support documentation.

QUALIFICATION

Required:

• Education - Bachelor's degree required.Degree in Information Technology, Computer Science, Engineering, or related field preferred.
• Candidates must have 5 years of experience in a Network engineering role in a Cisco environment.
• Candidates must have 5 years of experience in supporting/managing hosted Data Centers.
• Candidate must have advanced knowledge and hands-on administration experience with the following technologies and concepts:
• Cisco Networking Equipment (Firewalls, Switches, Wireless, Routers, etc.) required.
• Cisco Firewall Management Console (FMC) administration experience required.
• Netskope administration experience required.
• Cisco ISE administration experience required.
• Cisco Remote Access (AnyConnect) administration experience required.
• Azure Firewall administration experience required.

Preferred Skills:

• Certifications CCNA or CCNP
• Forcepoint administration experience
• Network Access Control solutions
• Forescout administrative experience
• Cisco DNA administration experience
• Cisco Nexus Dashboard administration experience
• Python skillset
• Ansible or Terraform administration experience
• Experience in automating network deployments
• Monitoring/Observability tools (Dynatrace)
• Forward Networks administration experience
• Cisco Wireless solutions experience
• SD-WAN, with Cloud Integration experience
• InfoBlox administration experience
• Configuration Drift Detection and Remediation
• Security Posture Assurance
• Cloud knowledge and experience of Azure
• Disaster Recovery
• ITIL Certification and experience
• Centralized Policy Management Must possess experience in translating and managing security policy requirements into actual controls.
• Language Skills - Must possess excellent communications and interpersonal skills.
• Project Management Skills - Must possess excellent project management skills and have experience in managing medium to large IT projects.
• Reasoning Ability Must possess excellent reasoning skills and be able to evaluate multiple potential solutions to complex problems.