Network Security Engineer

We are currently seeking for a Network Security Engineer with a minimum of 3-5 years of hands-on experience. Manage our network segmentation and network visibility solution. Responsibilities: Routing protocols EIGRP, OSPF, and BGP; configuring, troubleshooting, typical show commands to research issues. Racking and stacking Cisco 2900, 3700, 3600, 3800, 4500, 6500 series switches.Upgrading firmware on Cisco switches.Engage with Engineering, Medical, PCI Compliance and application development teams to determine segmentation requirements.Engage with vendors to determine segmentation requirements for their products.Troubleshooting of any issues that occur because of segmentation.Broker after hours outage time with stakeholders for network segmentation changes.Site surveys of systems/devices that will be segmented.Handle escalated tickets regarding segmentation and network visibility.Onsite support for afterhours segmentation changes.Troubleshoot integration issues with other systems.Troubleshoot communication issues between the overlay and underlay of our network segmentation solution.Collaborate with rest of network department to ensure their systems remain stable as we add security measures.Support Radiology doctors with their remote access devices.Configure new devices onsite for new doctors.Participate in Change control process and peer reviews.Tools for upgrading firmware on Cisco switches; TFTP and FTP server, thumb drive.Configuration of Cisco switches in command line via console and SSH.Working knowledge of Cisco Catalyst linecards; multi-gig copper and fiber cards, supervisors.Deep understanding of Layer 1 concepts, configuration, and troubleshooting; Working knowledge of Power over Ethernet; verification of power being provided to devices, PoE power budget on a switch.Deep understanding of Layer 2 concepts, configuration, and troubleshooting; spanning tree, root bridge, BPDU, designated ports, root ports, trunk and access ports, rapid spanning tree, ieee, MST, VLAN, Layer 2 extension, CDP, LLDP, MAC address, CAM and TCAM table, DHCP snooping.Deep understanding of Layer 3 concepts, configuration, and troubleshooting; Deep understanding of Layer 4 concepts, configuration, and troubleshooting; Deep understanding of Layer 7 concepts, configuration, and troubleshooting; Deep understanding of first-hop redundancy protocols; HSRP, GLBP, VRRP.Deep understanding of IPv4 addressing, variable length subnet masks, summarization.Fiber plant management; installing fiber patch cords, troubleshooting link issues, working knowledge of multi-mode and single-mode fiber cabling.Copper plant management; installing CAT5/5e/6 patch cords, 568A/B termination, knowledge of straight through, cross-over, rollover cabling, usage of a tone generator and tracing copper cabling from Location A to Location Z.Working knowledge of Cisco fiber transceiver types; SFP, SFP28, QSFP; and wavelength types; 850nm, 1310nm, SX, LX, SR, LR, LR4, 1-gig, 10-gig, 25-gig, 100-gig.Skills & Experience: 5+ years' experience in network engineering Bachelor's degree CCNA, A + and Network + certification is strongly recommended In-depth knowledge of Networking and Security. Knowledge of Security best practices.Experience working with Firewalls, Routers, Switches, Access points and Voice over IP phones.Excellent communication skills will need to converse with various technical and non-technical teams.Flexibility to work after hours on changes.Experience with network segmentation and Zero-trust architecture is a plus.Experience with a SASE solution is a plus.Worked in a hospital setting before is a plus.    Company Overview Founded in 1998, Lincoln Computer Services is a growing custom IT solution provider, servicing New York City and Long Island, New York.If you are interested in working for a growth-oriented company with a culture that exudes collaboration, integrity and a passion for technology, submit your resume today   Powered by JazzHR