Network and Security Senior Engineer

Description

Responsible for day-to-day administration and project-based tasks of next generation firewalls, web application firewalls, network admission control, routers, and legacy and SDN switches to meet the business requirements.

Applies software patches whenever requested either remotely or on-site.

Provides 24x7 on-call and on-site support when performing the duty of on-call, which has a roster that is rotated, or for emergency needs.

Diagnoses and resolves network problems in short periods.

Suggests improvements including permanent and workaround solutions for improvement of EBC network and security infrastructure's resilience, flexibility, and scalability.

Coordinates with the security operations center to defend proactively against known exploits.

Monitors and reports network security performance and integrity.

Acts as the primary interface with vendors including ISPs for resolving network and security reported issues.

Implements disaster recovery procedures.

Communicates with end-users and customers when needed.

Investigates validity and responds to reported vulnerabilities received from all security control units.

Creates and maintains comprehensive network documentation, including network diagrams, configurations, and standard operating procedures. This documentation ensures that the network infrastructure is well-documented, facilitating efficient troubleshooting, maintenance, and future network expansions.

Collaborates with cross-functional teams, such as system administrators, to ensure the seamless integration of network security services with other IT systems. May also lead or participate in projects related to network upgrades, migrations, and expansions.

Requirements

• Bachelor's degree in engineering, computer science, or a related field is a must.
• 5+ years of professional experience.
• Strong experience in standard enterprise network firewalls and WAF solutions.
• Knowledge of TCP, IP, ARP, Ethernet, OSPF, EIGRP, and optionally BGP and encrypted tunneling protocols.
• Experience administering enterprise networks in mission-critical, 24x7 production environments.
• CCNP Enterprise and NSE4 certifications are a must.
• TMOS 201, PCNSA, and DCACI certifications are optional.
• Familiarity with ITIL concepts such as incident, change, and problem management.
• Knowledge of PCI-DSS and ISO 27001 standards.