Senior Security Network Engineer

 

 

Job Description

The Senior Network Security Engineer is the backbone of technical expertise for a team of engineers responsible for ensuring the continued operations and functions of the network assets including Cisco routers and switches, DNS , Firewalls in addition to routing and MPLS in a network & network environment.

Responsibilities:

-Maintain, operate, and defend a complex global IP network & network environment.
-Analyze, design, test, install, document, and implement solutions in support of global converged network technologies.
-Configure, install, monitor, upgrade and maintain information assurance equipment suites and the networks that are protected by those suites.
-Resolve operational issues involving routers, switches, routing and MPLS services in a network.
-Perform immediate troubleshooting as the situation dictates for any and all network outages as reported by users, sensors, and/or operational personnel.
-Conduct daily performance checks on all  IP network devices.
-Perform system maintenance on any systems requiring security updates, patching, and upgrading.
-Troubleshoot layers 1-7 of the OSI model in a complex IP/MPLS environment.
-Proactively utilize network monitoring tools to isolate events before service degradation occurs.
-Configure and create replacement gear as needed.
-Coordinate with users and other Internet Service Providers to ensure timely and satisfactory resolution for any trouble tickets pertaining to the environment.
-Create technical documentation, network diagrams, inventory control documentation.
-Provide administrative support in the form of technical writing, documentation, and diagram support.
-Provide instruction, mentoring, guidance, and leadership to Tier II personnel.

 
Required Skills

-5 years of IP network and security experience.
-The Tier III Technician must possess subject matter expertise in as many of the following technologies as possible:
-Remote access:  SSH, Telnet, X-Windows Emulation, Remote Desktop (Microsoft Terminal Services Client)
-Expert Level Networking:  IP Subnetting, wildcard masks, CIDR notation, the client/server model, the OSI model, the TCP/IP model, how TCP functions, how UDP functions, how ARP functions, and how DNS works.
-Routing:  BGP, OSPF, EIGRP, Static Routes, Policy Based Routing. Displaying statistics such as routing table, ARP table, interfaces, and processes.  Upgrading IOS and recovering lost passwords.
-Switching:  Cisco IOS and CATOS, configuring monitoring, displaying statistics such as MAC address table and ARP table, troubleshooting switch stacks, upgrading IOS,  and recovering lost passwords
-VLAN:  Creating VLANs, and placing interfaces in VLANs
-VPN:  Creating VPNs on routers, firewalls, and bulk encryption devices.  Troubleshooting IPSec, GRE, and SSL VPNs.
-Troubleshooting:  Must be skilled in the art of isolating problems.  Must be able to think critically and analyze situations from many different angles
-Access-Control Lists:  Order of application, syntax, usage for access control and PBR.
-UNIX Administration: User management (creating, deleting, modifying), VI, file management (permissions, creating, deleting, modifying), process monitoring, job scheduling, BIND (DNS), FTP, SFTP, network configuration, applying OS patches, and hardening.
-This position requires the ability to maintain an active Top Secret DOD security clearance.

Desired Skills:
Knowledge of DNSSEC and RFC 4033 - 4035

CCIE, CCNA, CCNP, SSCP, CISSP Certifications.

Experience managing Classic CyberGuard, CyberGuard TSP, Cisco PIX, Netscreen, and Fortigate firewalls