Network and Security Engineer

Job / Functional Title

Network & Security Engineer

ComMap Function

GS-IT Infrastructure Engineer

Corporate Title

Assistant Vice President

Department

GS-IT

Reports to

Head of Infrastructure

Overtime eligible:

No

Management responsibility

No

Main purpose of role / Position summary

Responsible for engineering and administrating Network infrastructure. Ability to support large enterprise mission critical networks and develop new technology solutions. Provide technical expertise in working with clients and other GS-IT groups on network issues.

Key activities / Essential duties and responsibilities

· Administer all network infrastructures -LAN, MAN, WAN, VPN and DMZ’s including production

support, fault and performance monitoring, improvements and capacity planning.

· Analyze & monitor networks continuously.

· Analyze and audit overall network security.

· Global network responsibilities –follow the sun.

· Engineer, design and implement best practices solutions for network connectivity and firewalled.

DMZ’s

· Provide connectivity solutions to internal customers – application developers and systems.

analysts, other infrastructure team members, first line support teams

· Make recommendations to management regarding best practices for maintaining the network to meet business requirements.

· Project managing infrastructure deployments, network migration, network design, setup IP.

internetworking with third party, etc.

· Ensure compliance with Corporate Security policies and procedures.

· Comply with network Corporate Change Control policies and procedures.

· Troubleshoot networks, proxy, f5, firewall, DNS, external vendor and internet connectivity issues.

· Firewall rule implementations and DMZ builds –internet and market data on Fortinet FortiGate appliances.

· Implement and support Arista product line -Catalyst switches, routers, etc.

· Implement and support routing protocols: BGP, OSPF, PIM, etc.

· Administer firewalls, f5 load balancers, and FortiGate Proxies

· Administering of network monitoring tools - Command, Stablenet, etc.

· Keep thorough and current network infrastructure documentation –Visio, etc.

· Off hours and weekend support required.

· 75% network administration – 15% firewall security – 10% voice support

Key Requirements (education, work experience, further qualifications)

· Excellent communication, interpersonal, organizational and documentation skills

· Good understanding of more advanced or recent routing and transport protocols at various levels

of the OSI layer

· Current on networking and firewall trends in architecture and design

· Good working knowledge of UNIX (Solaris and Linux), Windows and telecom equipment.

· Understanding of VPN concepts, protocols and implementations

· Network experience with the Financial Industry’s unique requirements. Mark trends as well as firewall architectures

· Experience with Fortinet Fortigate firewalls.

· At least Arista Level (ACE-A / L1) or (L3) certification.

· Over 5 years of experience in a similar position

· Experience with project management

Disclaimer:

The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. This document is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required by the incumbents. Job responsibilities are subject to change, with or without notice. All employees may be required to perform duties outside of their normal responsibilities at any time at the Firm’s total discretion.

This document does not constitute a contract of employment with you of any kind, express or implied for any duration, or with respect to any of its stated or omitted terms. As described in the Firm’s employee handbook dated April 2009, the Firm reserves the right to terminate your employment with or without cause, notice or reason at any time at its sole discretion.