Senior Network Security Engineer

Overview

Manage and maintain multi-protocol datacenter and backbone networks
Define, and develop optimized network monitoring systems
Design and deploy new network architectures
Develop automated methods to mitigate and remediate network events
Analyze data to diagnose and identify root causes to network issues
Be an active participant in deep technical discussions
Develop and maintain consistency within the networking infrastructure
Working independently to solve multi-faceted problems

Functions

Responsible for working in a 24x7 Security & Network Operation Center environment and participating in on-call rotation and normal ticketing procedures.
Will participate in a rotating primary/secondary on-call for the Security & Network Operations Center 24x7.
Passionate, trustworthy, team-player, who is positive minded with a can-do attitude and exceptional follow-through
Articulate and experienced communicator with superb interpersonal, and documentation skills
The ideal candidate is a self-starter that can jump into a support/engineering ticket queue and work issues to resolution with little oversight, ensuring that changes made are appropriately documented for future reference.
Manage and maintain multi-vendor, multi-protocol datacenter and backbone networks
Define, and develop optimized network/security monitoring systems
Design and deploy new network architectures
Develop automated methods to mitigate and remediate network events
Analyze data to diagnose and identify root causes to network issues
Be an active participant in deep technical discussions
Develop and maintain consistency within the networking infrastructure
Working independently to solve multi-faceted problems
Networking – 8+ years of experience with expert level grasp of concepts as well as hands-on experience in networking and network technologies including Switches (L2), Routers / Routing (IP) / Routing Protocols (OSPF, BGP) and Internet-based network operations.
Network Security – 8+ years of experience with expert level grasp of concepts along with hands-on experience in security including, access and application control, threat management (vulnerabilities, malware, APTs, botnets), understanding of various security and risk models, site and content categorization and SSL encrypt/decrypt functions.
Strong understanding of common network protocols (TCP/IP, GRE, IPSec, BGP, OSPF, MPLS, VRRP, STP, IPsec, SNMP protocols)
Strong understanding of Fortinet products and ecosystem is preferred.
Carrier / ISP Routing – Expert level experience in building and managing large-scale BGP environments with publicly routable Autonomous Systems, Route Arbitration, Peering, IRRs, etc.
Linux - 5+ years of experience with a strong grasp of concepts as well as hands-on experience in the administration of common Linux distributions (CentOS, Ubuntu, etc.) and Applications (Web Servers, SQL Databases, LDAP, etc.)
Docker/Kubernetes, Orchestration (Salt/Concourse) experience is a plus.
Experience with Cloud providers (Google, AWS, Azure) is a plus.
Experience with automation of network engineering tasks (Terraform/Ansible is a plus).
Application Delivery – In-depth conceptual and hands-on understanding of availability technologies such as Load-Balancing, Denial-of-Service mitigation and prevention methodologies at-scale.
Troubleshooting – Superb troubleshooting skills and root cause analysis capabilities
Procedures & Documentation – Capability to document well as well as follow policies and procedures in day-to-day operations of security and networks operations.
Status reporting & presentations
Planning for long-range projects
Preferred certification levels: CCIE R&S, NSE7/8