Engineer - Network Security
$96,400–$120,500 year
On-siteOrange, Connecticut, United States
Job Summary
Gather business requirements and architect new network security solutions to meet global standards and design specifications. Manage relationships with outsourced vendors, coordinate design plan execution, and ensure infrastructure upgrades meet existing SLAs. Analyze current state infrastructure, conduct risk assessments, and participate in cyber investigations to identify vulnerabilities and recommend corrective actions. Monitor Internet and intranet security effectiveness, proactively assess improvements, and support forensic research. Administer, configure, and optimize enterprise firewalls, secure web gateways, and web application firewalls, including troubleshooting connectivity and security issues. This role reports to the Sr. Manager – IT Security and supports the engineering, installation, and maintenance of corporate network security using current and emerging technologies.
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems or a related field of study
- Minimum of two (2) years of hands-on experience in network engineering
- Operational support experience
- Troubleshooting experience with enterprise firewalls
- Experience with secure web gateways
- Experience with web application firewalls
- Ability to gather business requirements
- Ability to architect and design new network solutions
- Ability to translate business requirements into secure network solutions or process designs
- Ability to ensure architecture execution to plan
- Ability to review performance of existing infrastructure
- Ability to plan and execute lifecycle upgrades
- Ability to coordinate and communicate upgrades
- Ability to partner with cross functional teams
- Ability to analyze current state and proposed network related infrastructure
- Ability to conduct risk assessments based on impact and potential severity of a security related issue
- Ability to participate in cyber investigations
- Ability to analyze data/evidence to identify potential cyber incidents and vulnerabilities
- Ability to provide insights into recommendations for corrective actions
- Ability to monitor assigned aspects of Internet and intranet security
- Ability to proactively assess and make recommendations for improvement
- Ability to assist in the deployment, configuration, and maintenance of SDWAN solutions
- Ability to monitor SDWAN performance
- Ability to troubleshoot connectivity and security issues
- Ability to collaborate with senior engineers to optimize network architecture
- Ability to administer, configure, and optimize enterprise firewalls
- Ability to manage advanced policy management
- Ability to set up high-availability
- Ability to perform firmware upgrades
- Ability to integrate with SIEM and automation tools
- Ability to implement and manage secure web gateway solutions
- Ability to configure policy
- Ability to integrate user authentication (e.g. SAML, AD)
- Ability to troubleshoot web access and security incidents
- Ability to deploy, configure, and maintain Web Application Firewall (WAF)
- Ability to tune rules
- Ability to monitor for application-layer threats
- Ability to collaborate with application teams to minimize false positives and optimize protection
- Ability to assign and coordinate external Internet domain names and identifiers
- Ability to support the resolution of all network security infrastructure related break/fix issues
- Ability to accurately interpret symptoms
- Ability to identify root cause
- Ability to take appropriate corrective action to resolve
- Must be able to work in In Office, Orange CT
- Must be a citizen of the country of the vacancy or comply with applicable immigration requirements to legally work in that country
- Must be able to work outside of their regular schedule/job duties in the event of a system emergency
- Must be able to support NERC Reliability Standards compliance roles and responsibilities
- Must be able to support Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities
Desired Qualifications
- Fortinet NSE certification
- Palo Alto PCNSE certification
- Checkpoint CCSA/CCSE certification
- Zscaler Certified Professional certification
- Akamai Security certification
- Experience assisting in the deployment, configuration, and maintenance of SDWAN solutions
- Experience working with secure web gateways: Zscaler
- Experience with web application firewalls: Akamai
- Experience troubleshooting of enterprise firewalls: Fortinet, Palo Alto Networks, and Checkpoint
- Preference for Fortinet
- Preference for FortiGate
- Preference for Palo Alto Networks
- Preference for Checkpoint platforms
- Preference for Zscaler
- Preference for Akamai
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.