Network Security Engineer

Position Summary:

The network security engineer is a key position in the networking and network security team responsible for Next-Gen Firewalls, Routing, and Defensive Security. The network security engineer will report directly to the networking and network security manager and must interface effectively with directors and staff throughout the Firm

Duties & Responsibilities:

• Participate in design meetings and reviews from a security and network perspective on assigned priority projects
• Propose networking security architecture to meet the business requirement
• Identifying, monitoring, and defining the requirements of the overall security of the systems
• Configuring and implementing intrusion detection systems and firewalls
• Reporting the security analysis and monitoring findings
• Review and Implement network optimizations, network resilience, and network failover testing as directed
• Develop a plan and strategy for complex network upgraded
• Assist with strategic planning activities (capacity planning, process improvement, maintenance, upgrade, end-of-life planning, roadmap development)
• Responds to trouble tickets and perform troubleshooting on network and security devices
• Maintains and administers network standards, documentation, processes, and procedures
• Monitoring network performance and ensuring system availability and reliability
• Work within established configuration and change management policies to ensure awareness, approval, and success of changes made to the network infrastructure
• Liaise with vendors and other IT personnel for problem-resolution
  
  
  

Qualifications:

• Minimum 10 years of experience in the field of networking, network security, and firewalls
• Must have hands-on experience with Cloudflare, Fortinet NAC, Palo Alto, and Fortigate firewalls
• Deep understanding and experience with DNS, NTP, BGP, and other critical infrastructure protocols
• Must understand BGP routing protocols in a large environment
• Deep knowledge of routing, load balancing, and network environment
• Proven work experience as a network security engineer or information security engineer
  
  
  

Education / Experience:

• BA or BS/BE degree in computer science or related IT fields
  
  
  

Skills & Abilities:

• The network security engineer must be able to work in a business environment requiring 7 days/24 hour responsibility and response time.
• Certifications are a strong plus: Palo Alto Security Firewall Certification, Fortinet Network Security Security Expert (NSE), Cisco CCNP routing and switching or security, and other security-related certifications
• The ideal candidate has at least 10 years of experience working in a team-oriented, collaborative environment supporting an enterprise network. We seek a skilled individual who combines excellent operational judgment. The candidate must be able to execute tasks and make sound decisions in a fast-paced, high-pressure environment. Close attention to detail, organizational skills, and the ability to work under pressure are essential.
• Palo Alto Firewalls, Global Protect VPN, and Panorama
• Solarwinds NPM, NTM, and KiWi Syslog
• Fortinet Network Access Control (NAC)
• Fortiget firewalls/SDWAN
• Cisco Wireless system
• Cloudflare DDoS Protection
• Debugging/configuration problem-solving skills
• An ability to learn new technologies quickly
• Good time management skills
• An ability to follow processes
• Good communication skills - both written and verbal
  
  
  

The actual salary offered will be based on a number of factors including but not limited to the qualifications of the applicant, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job.

New York Salary Range

$140,000 — $150,000 USD