Network Security Engineer (onsite)

Job Responsibilities

Collaborating with network architects, project managers and engineers to design and implement functional company networks.

• Design, build, implement, document, and manage a full landscape of resilient and secure networking components such as Routers, Firewalls, Switches, wireless equipment, and load balancers for environments ranging from small remote client locations to Data Centers and the cloud.
• Leverage observability tools to build and enhance monitoring, alerting, and config backups across the network topology.
• Quickly diagnose and troubleshoot a wide range of network issues, from end-host connectivity to traffic flows, with root cause analysis for reporting and the goal of future improvements.
• Manage Incident/Tickets, Change/Configuration Management/Problem management.
• Helped other engineers in resolving technical issues and guide them from a technical perspective.
• Act as an escalation point for break/fix issue resolution.
• Constantly innovating and improving our infrastructure and processes.
• Participate in on-call rotation as needed and address critical issues during off hours as needed.
• Work onsite/remote at client locations as needed.

What We’re Looking For

• | 8+ years of networking and systems experience supporting a wide variety of network technology and platforms, designing, and implementing complete network infrastructure, as well as integrating partial upgrades in a variety of environments, from network infrastructure to copper and fiber cabling, to configurations with the goal of having a system that is highly reliable and simple to manage.
• Proven and demonstrable knowledge of networking technologies and communication protocols (Routing (RIP/OSPF/EIGRP/BGP), Switching L2/L3, spanning tree/portfast, Wi-Fi, VLANs, iSCSI, VPN, DNS, DHCP).
• Must have strong experience in Palo Alto and Cisco ASA. Must know in-depth on APP-IDs, Content IDs, URL filtering, site to site VPNs and using Panorama/FTD for management. Must have wildfire deployment experience.
• Automation experience/Cisco ACI is a strong plus.
• Knowledge in PRISMA, NSX-T, DNAC is a huge plus.
• Experience with Cisco ISE deployments is a huge plus.
• Must have strong experience in Cisco Viptela deployment.
• Experience in design and implementation of the majority of the following:
• Firewalls, DNS, IDS/IPS, WAF, anti-virus, content filtering, data loss prevention, endpoint security, email security, network vulnerability scanning, incident management
• Excellent communication skills, creative problem solving, and strong passion is a must.
• Strong technical curiosity, security-minded, and a “let’s figure it out” attitude.
• Knowledge of infrastructure monitoring platforms and protocols
• Knowledge of managing Digital Certificates, public DNS, private DNS.
• Experience with network traffic analysis using tools like Wireshark.
• Knowledge of managing Digital Certificates, public DNS, private DNS.
• Experience with network observability, management, and monitoring tools like PRTG, Auvik, SolarWinds, etc.