Sr.FIM Infrastructure Security Engineer

Sr.FIM Infrastructure Security Engineer, 12 +

Must have active and genuine linkedin

X Hybrid: Work location & Remote (3 days in office/2 days

remote) In office-2 Metrotech Center Tue/Wed/Thurs –

Hybrid-Mon/Fri. ( Local candidates only )

Scheduled Work Hours: Normal business hours Monday-Friday 35 hours/week

Start date: 07/08/2024

End Date: 07/06/2025

Job Description / Justification

The NYC Office of Technology and Innovation has been tasked with recruiting a Specialist 3, Security Engineer/Architect. Who will be

required to assist with the design and deployment of firewall security solutions deployed in large, complex networked environments. The

architect/engineer must be highly specialized to provide guidance at various stages of planning and implementing secure design, processes,

and resilient solutions. This resource will have significant interaction with OTI Infrastructure Management leadership, its engineering and

architecture teams, operations team, and datacenter teams.

SCOPE OF SERVICES

Firewalls and Network – Next-Gen Firewall, Routing and Defensive Security,

DNS, DDOS: design, implementation, configuration, optimization, and troubleshooting

Tasks

• Participate in design meetings and reviews from a security and network perspective on assigned priority projects.
• Propose networking security architecture to meet the business requirements and while adhering to OTI’s best practices guidelines.
• Collaborate with OTI’s Architect teams for developing operable solutions for Citywide requirements.
• Complete all requirements for installing new network or firewall devices.
• Follow OTI process for new devices provisioning of integrated systems.
• Configure ports, configure firewalls, and apply the base templates configurations, integrate the appliances into production network.
• Develop and validate base configurations for operational use.
• Create and review method-of-procedure for the change to be executed during the approved change window.
• Open TAC cases as needed and identify root causes.
• Review and implement network optimizations, network resilience and network failover testing as directed.
• Develop plan and strategy for complex network upgrades.
• Complete any additional tasks assigned by the manager.
  
  

MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will

not be considered

• Minimum 12 years of experience in the field of networking, network security and firewalls
• Must have hands-on experience with Palo Alto, Checkpoint and Cisco firewalls.
• Deep understanding and experience of DNS, NTP, BGP and other critical infrastructure protocols.
• Must understand BGP, MPLS, OSPF, IS-IS routing protocols in a large environment.
• Deep understanding on routing, load balancing and networking infrastructure.
  
  

Desirable Skills/Experience

• Hands on experience in Cisco and Palo Alto firewall technology
• Additional experience in the field of load balancing.
• Good project management skills
• Ability to simultaneously work on multiple projects