Secured Network Services Lead Engineer

Design and implement computer and information networks, such as local area networks (LAN), wide area networks (WAN), intranets, extranets, and other data communications networks. Perform network modeling, analysis, and planning. May also design network and computer security measures. May research and recommend network and data communications hardware and software. Primary responsibilities include support and administration of next-generation firewall, IDS, URL filtering, and other related technologies. The ideal candidate has a strong networking background, experience administering next-generation firewalls with advanced features such as NAT, transparent deployments, IDS/IPS, URL inspection, HTTPS decryption, and anti-virus. Extensive contact with internal customers, other information technology (IT) professionals, and vendors is required to identify, research, analyze, and resolve complex issues and problems. Applies specialized domain knowledge in monitoring, assessing, analyzing and/or evaluating processes and data. Makes judgements and recommendations based on analysis and knowledge.

Responsibilities

Primary support and central point of contact for next-generation perimeter security devices; Responsible for up-time, reliability, stability and policy maintenance of supported systems; Produces and maintains documentation; Development and maintenance of departmental metrics and reporting; May function as team lead, providing technical leadership to the team; Monitors application, including setting alerts to maintain the stability of the environment and application, monitoring error logs, and automating administration tasks wherever possible; Serves as key person in troubleshooting system problems, taking ownership of problems to resolution; Maintains current description and documentation of policy configuration, including tracking and documenting any changes to policies; Analyzes performance trends to optimize system performance; Provides daily technical guidance and oversight to engineer teams; Performs other duties and responsibilities as assigned

Requirements

Bachelor’s degree in Computer Science, MIS or related degree; 8 to 10 years of relevant experience in Network or Information Security, or a combination of education, training and experience; General Experience - 6 to 10 years; Strong networking background; Experience administering next-generation firewalls with advanced features such as NAT, transparent deployments, IDS/IPS, URL inspection, HTTPS decryption, and anti-virus; Knowledge of Information Security programs including audit reviews, risk assessment, awareness and training, identity and access management, data protections, secure SDLC, incident management, vulnerability assessment, penetration testing, third-party assessment, secure configurations and patch management; Knowledge of government and other regulations related to Information Security (e.g., GLBA, SOXA 404, FFIEC, PCI, Privacy, HIPAA, etc.); Knowledge of DDoS mitigation technologies and protections; Technical skills and proficiency in platforms and systems (e.g., Windows, UNIX, SQL, Tandem); Technical skills and proficiency in networking protocols and hardware (e.g., TCP, DHCP, routers, firewalls, etc.); Knowledge of Process Improvement methodologies; Communication skills; Problem solving skills; Time management skills; Research, writing, editing and proofreading skills; Ability to work a non-standard shift including nights and/or weekends and/or have on-call responsibilities; Ability to understand basic programming concepts, coding practices, algorithms and data structures

Nice to have

Security and control certifications preferred (CISSP, CISM, CISA, CRISC); Master's degree

Benefits

Medical, dental, and vision; life insurance; critical illness insurance and accident insurance; disability benefits; retirement savings; paid time off (including vacation, holidays, and sick leave); parental leave; additional compensation (cash or equity); discretionary bonuses; commissions