Security Network Engineer

Job Description

looking for Network Security Engineer to work in their Flanders, NJ location. The role of the Network Security Engineer is to provide security operations and design for a complex and mid-sized (~30 WAN sites) network infrastructure, including employee and customer facing hosted environments and cloud services. This person must provide expert technical assistance to team members and other managed personnel with high-level systems and network requests focusing on the security aspects of the network lifecycle. This role is responsible for designing, implementing, testing, and managing complex security infrastructure. Must have ability to drive complicated projects to successful completion. Supports a wide range of industry standard technology. Job Description: 1. Architecture, Design, and Implementation of Network Security Devices 1. Working with the Information Security group to implement the rules and requirements that enforce corporate policies of data access. 2. Expert understanding of how to install and configure core datacenter network security such as Firewalls and VPN devices 3. Operational experience of Cloud Access Security Brokers (CASB) such as Zscaler, Proofpoint or Palo Alto to handle traffic classification and cloud-based security needs. 4. Familiarity of network services to provide mission critical and redundant capabilities. (QoS, EIGRP, BGP,) and secure layer services such as DVPN over Internet. 5. Understanding of the latest IT trends and understand how the business can benefit by providing technical direction to IT department with regards to network related items. 6. Operational experience in Cloud based connectivity. Handling of traffic filtering based on rulesets. Continuously assessing risk and recommending solutions to ensure the integrity and resiliency of the enterprise network. 7. Competent in justifying recommendations with cost/benefit analysis. 2. Administration 1. Must demonstrate a mastery of producing and maintaining accurate network architecture documentation. 2. Act as primary liaison with Information Security group to ensure proper and timely implementation of polices. 3. Work with team colleagues to respond to threats, implement Day 0 responses and coordinate updates using appropriate tools.

4. Manage all components of a large VPN WAN infrastructure, network security components and 3rd party packages supporting network infrastructure and security 5. Must have detailed knowledge of commonly used application protocols such as SMTP, FTP, TFTP, SSH, etc... 6. Operational Experience of networking concepts, configure routing (BGP, EIGRP), switching, DNS and DHCP technologies 3. Maintenance (Network Security support) 1. Experienced with routines for troubleshooting, debugging and restoring communications within the network 2. Experienced with the terms of the vendor services, SLA's and support protocols 3. Ability to communicate with technical and non-technical 3rd party vendors to resolve issues. 4. Proficient at network monitoring using industry standard tools (SNMP, Netflow/sFlow, etc...). 4. Support for Operations 1. Train and direct other network administrators or operators regarding security aspects 2. Work with Lead Engineers to assist in troubleshooting problems and issues. 3. Provide on call rotation to ensure support coverage as needed. 4. Any other duties as assigned for support of network operations Skill Sets: Education: degree or certification in computer science or related field Licenses/Certification/Registration: Industry networking security certification preferred. Cisco, Zscaler experience preferred. Experience: 5+ years of network security experience, including firewall, ACL and cloud access management. General Skills: Knowledge of and experience in designing large intricate fault tolerant networks. Required Technical Proficiencies: Switching (Capacity Planning & VLAN's), Routing (BGP, EIGRP, OSPF, RIPv2), VPN Technologies, Wi-Fi technology, CASB Technologies, Firewall Management Strong Knowledge of: Microsoft Windows Server (Active Directory), Linux, RADIUS, MSCHAP, Exchange, VMWare, Citrix, Terminal Services, Tripwire, CASB, Single Sign On.