Job Description
L / L engineering capability as related to cybersecurity design / architecture covering data, voice and
cloud to support strategy and business requirements for perimeter security, compliance, resilience,
recovery, capacity and access. This incorporates all aspects of the communications infrastructure
including internal and external, mobile, public, private, cloud, intranet and data centers.
Current Environment
- Multiple data centers and + office locations.
- Palo Alto Firewalls + Panorama, and FortiNet FortiGate Firewalls + FortiManager / FortiAnalyzer.
- Cisco Multi-Site Datacenter ACI / SDN.
- Cisco Nexus (ACI leaf / spine & standalone), Nexus (VDC), and Nexus switches.
- Cisco ASR multigigabit routers. Advanced IP traffic engineering via BGP & OSPF routing.
- Cisco ASA (for NAC-enabled remote-access VPN), ISE, and AnyConnect VPN.
- Cisco Enterprise Wireless Controllers with + wireless-access-points.
- Site-to-Site VPN via FortiGate SDWAN and Palo Alto FWs.
- FortiNet FortiNAC for wired, wireless and RA-VPN network-access-control (NAC).
- Vivai Solutions Observer Apex, GigaStor, OMS and Analyzer.
- Cisco Unified Communications Manager, Unity Voice Mail, UCCX, ExpressWay and QoS.
- Cloud exchange peering with Amazon Web Services and Azure cloud computing platforms.
- NetScaler Load Balancers & Infoblox centralized DHCP.
Responsibilities
L / responsibility for enterprise I&O security strategy, architecture, implementation and
steady-state support.
- Functions as subject matter advisor for all aspects of firewall perimeter security.
- Produces and maintains documentation re : topologies, configuration and design.
- Assesses associated risks; specifies recovery routines and contingency procedures.
Formal Education & Certification
Bachelor's degree in Computer Science or Information Systems and years related work
experience or any equivalent combination.
Certifications in Palo Alto, FortiGate, Cisco switching / routing and related security
technologies preferred.
Knowledge and Experience
L / architect-caliber skills in Palo Alto firewall solutions and the Palo Alto Panorama
management platform.
L / architect-caliber skills with FortiNet FortiGate firewalls and the FortiNet
FortiManager / FortiAnalyzer management platform.
Proficiency with configuration and operational support of BGP routing on Palo Alto and
FortiNet firewall solutions. Troubleshooting capability in multi-platform BGP routing
environments, specifically Cisco, Palo Alto, FortiNet, AWS and Azure.
Must be very comfortable with the technical elements of network security and design, to
include datacenter-caliber clustered-FW perimeter solutions, IPSec VPNs (SS, ADVPN &
BB), TCP / IP, IPS / IDS, CASB, VoIP, load balancers, routers and switches.
Must be very comfortable with the technical elements of network security and design as
related to hybrid cloud environments, including AWS and Azure.
MUST have packet capture skills using Wireshark or other tools for packet capture, decode &
analysis.
Personal Attributes
- Excellent written, oral, and communication skills.
- Ability to conduct and direct research into IT issues and products.
- Ability to present ideas in business-friendly and user-friendly language.
- Highly self-motivated, self-directed, and attentive to detail.
- Ability to effectively prioritize and execute tasks in a high-pressure environment.
Work Conditions
- Some travel may be required for meeting with stakeholders, network projects, etc..
- Ability to lift at least lbs for hardware equipment installations as
Our benefits package includes :
- Comprehensive medical benefits
- Competitive pay
k) retirement plan
- much more!
L2/L3 Security & Firewall Engineer
L/L engineering capability as related to cybersecurity design/architecture covering data, voice and. Palo Alto Firewalls + Panorama, and FortiNet FortiGate Firewalls + FortiManager/FortiAnalyzer. Functions as subject matter advisor for all aspects of firewall perimeter security. Advanced IP traffic ...
Network Engineer (Levels 2, 3) - Security Clearance Required
CACI's Transport & Cybersecurity Services (TCS) program is actively hiring a team of TS/SCI cleared Network Engineers to support an Intelligence Community customer’s wide-area (WAN), local-area (LAN), and campus-area (CAN) networks across multiple security domains. Our team of talented Network and C...
Network Security Engineer II
A company is looking for a Network Security Engineer II (Contract) in Tampa, FL. ...
Sr. Connectivity Solutions Network Engineer
This position will be responsible for the design, development and delivery of ship to shore communications and data transport, global wide-area network routing, network security, cloud networking, data center networking to achieve and sustain world class Shipboard Communications and services for the...
Lead Network Administrator
The Digital Modernization Sector at Leidos currently has an opening for a Lead Network Administrator to work onsite in Doral, Florida and have the opportunity to oversee both traditional on-premise enterprise networking and cloud-based network infrastructure for IT and Cyber Services programs suppor...
SCITES Network Administrator Lead
Peraton is seeking a highly qualified candidate to fill our Network Administrator Lead role on for the upcoming SCITES (USSOUTHCOM CYBER INFORMATION TECHNOLOGY ENTERPRISE SERVICES). Six+ years of experience supporting global network systems and subsystems; troubleshooting a wide range of LAN, Multi-...
Network Engineer II
The Network Engineer II works closely with senior engineers and other IT teams to support network projects, troubleshoot issues, and contribute to the continuous improvement of the network. This role is ideal for a motivated network engineer looking to expand their skills in both on-premises and clo...
Firewall / Network Administrator
Networking Expertise: Solid foundation in networking principles including TCP/IP, routing protocols, LAN/WAN, VLAN, and segmenting networks for security purposes. Firewall / Network Administrator. Network Security: Deep knowledge of network security principles, devices, and protocols including IDS/I...
Network Security Engineer
Evaluate new networking and network security technologies as they evolve and recommend performance-enhancing as well as security-enhancing network equipment. Field experience should encompass enterprise network technologies (CISCO) support, applied network security engineering, knowledge of disaster...
Senior Network and Computer Systems Administrator
Will maintain the server and network systems and are responsible for the upkeep, configuration and reliable operation of entire IT enterprise. Helps to develop performance and security plan for computer systems that meet the needs of network users. Uses advanced knowledge in evaluating and assessing...