Sr Network Engineer - Security Specialty

Responsibilities

As a Network Engineer specializing in security, you will be supporting and building a world-class network architecture spanning multiple datacenters and providing hosting services throughout the world. Industry best security practices should be followed while building and maintaining these networks. As part of the Network Engineering team, you will be responsible for:

• Work with firewall and segmentation platforms to secure the network from external and internal attacks.
• Work across teams to identify potentially sensitive areas of the network that should be segmented from the rest of the network and propose solutions to implement this segmentation.
• Participate in network engineering development from idea to plan, design and integration for the relevant network environments to meet stakeholder requirements
• Provide troubleshooting assistance/escalation to support teams, as needed, for critical production issues and incident management and reporting.
• Be able to quickly troubleshoot networking and security problems and find solutions to resolve them under pressure
• Urgently analyze and troubleshoot issues impacting production.
• Work with technology operations tools to develop trending analyses and eliminate recurring incidents

A Candidate Must

• Be fluent in speaking, writing, and reading English
• Have at least 5 years of data center networking and security experience
• Have a Cisco CCNP, Juniper JNCIS, or equivalent experience and capabilities
• Understanding IP protocols at all layers of the Networking stack
• Have extensive experience with Palo Alto and/or Fortinet firewall products
• Have Expertise in routing protocols such as BGP, OSPF, and ISIS
• Have proficiency on VLANs, STP, SPAN, Inter VLAN routing and advanced switching concepts
• Have in-depth knowledge of DHCP, NTP, HSRP, VRRP, ARP, NAT, ACL, PBR, GRE, IPsec, Remote Access VPN, and DMVPN
• Have a good understanding and experience methods of implementing network security, firewalls, DDoS issues, and intrusion detection
• Have experience on UNIX/Linux systems and an understanding of how to debug network issues as they relate to those systems.
• Be willing to participate in on call rotation
• Ability to impact operations and effect change without being confrontational, highly self-motivated and capable of working under pressure.
• Demonstrated analytical and problem-solving skills, detail oriented.
• Be able to plan, execute, document projects without large amount of supervision

Skills or Capabilities that are desired, but not necessarily required:

• Have experience with EVPN and/or VXLAN on Arista and or Juniper Networking Products
• Experience with public cloud networking. GCP, AWS, Azure, OCI
• Experience with Ansible for management of routers and switches
• Experience with Python or similar scripting languages