Network Security Engineer

Job Description

Job Overview:<BR>The purpose of this job is to fulfill the Network Security Engineer position.<BR>This is a hands-on position where the individual will be responsible for overseeing and managing the design and implementation of network security solutions.<BR>In addition, this engineer will be responsible for providing 2nd- and 3rd-level support for all network security issues or outages.<BR>Ensure the smooth operation of the infrastructure to provide maximum security, performance, and availability.<BR>Maintain close vendor relationships to support current technology solutions and provide roadmap strategies for all security systems.<BR>The candidate must also be flexible to work in 24x7 environments.<BR>Responsibilities:<BR>Design, build, and maintain Check Point and Fortinet firewall infrastructure.<BR>Provide architecture, design, and implementation for all Internet and Extranet firewall connectivity to meet business and InfoSec requirements.<BR>Manage projects related to implementing cybersecurity tools and products.<BR>Support F5 LTM/GTM load balancers and reverse proxy with WAF configuration.<BR>Manage McAfee Web Gateway proxy configuration, policies, and rulesets.<BR>Build, configure, and support Pulse Secure SSL VPN.<BR>Demonstrate strong knowledge of Citrix NetScaler Client configuration.<BR>Conduct vulnerability scans and assessments of all network and security devices.<BR>Manage and perform vulnerability remediation for all network and security devices, including software and hardware.<BR>Create network topology diagrams and record details for troubleshooting purposes.<BR>Perform other network security tasks as assigned.<BR>Track and manage license status for renewal, upgrades, and compliance of all network security devices.<BR>Demonstrate working knowledge of the Infoblox tool (IPAM).<BR>Resolve operational incident tickets (P1/P2/P3) or service requests as per the agreed SLA.<BR>Follow the required policies and procedures for incident, problem, and change management.<BR>Minimum Qualifications:<BR>Graduate or postgraduate degree in Computer Science or Information Technology (IT).<BR>Preferred Qualifications/Skills:<BR>Experience in enterprise network security.<BR>Experience with Check Point, Fortinet firewalls, F5, etc.<BR>Working experience with different Cisco platforms: ASR, Nexus, and Catalyst.<BR>Knowledge of routing protocols: OSPF, EIGRP, and BGP.<BR>Experience troubleshooting Layer 2 issues with a full understanding of STP.<BR>Experience troubleshooting 802.1X/EAP and handling NAC-related issues.<BR>Understanding of TCP/IP and UDP, and experience troubleshooting application issues using Wireshark and tcpdump.<BR>Knowledge of McAfee Web Gateway.<BR>Ability to add, modify, and delete entries in Infoblox DNS.<BR>Experience with banking or e-commerce network security infrastructure.<BR>Knowledge of ITIL, with integration across IPC (Incident, Problem, and Change Management).<BR>Knowledge of NIST standards.<BR>Strong analytical skills.<BR>Prior experience in financial services or other highly regulated industries.<BR>Strong working knowledge of security infrastructure and how these tools are used to maintain a strong security posture.<BR>Capital markets domain knowledge is preferred.<BR>Knowledge of Information Technology Infrastructure Library (ITIL), with integration across Incident, Problem, and Change (IPC) Management.<BR>Knowledge of other products such as BMC Control-M (CM), Cross File Transfer (CFT), Connect:Direct, and NetBackup is preferred.<BR>Basic understanding of IT infrastructure and troubleshooting.<BR>Technical and system expertise in relevant IT workstreams.<BR>Strong analytical and problem-solving skills.<BR>Advanced troubleshooting skills, including the ability to address more complex issues that require a deeper understanding of systems and applications.<BR>Specialized knowledge in specific areas that allows tackling intricate problems.<BR>Ability to collaborate with L1 Support to provide guidance and share insights for ongoing issue resolution.<BR>Strong problem-solving abilities, communication skills (written and verbal), time management, and team collaboration.<BR>Ability to escalate to L3 Support in a timely manner when challenges require a higher level of expertise and/or experience.<BR>Ability to effectively interact with stakeholders in the implementation of new functionality and in solving problems.<BR>Strong communication skills (written and verbal).<BR>Capability to coordinate and execute assigned projects. Basic understanding of IT infrastructure and troubleshooting.