Systems Engineer - Lead

Job Description : Conversion Eligibility REQUIRED

Hybrid - Richmond, McLean, Plano

No BR Flex

3 sub limit per supplier

3+ years exp

• Subject matter expert (SME) with a solid network security background and hands on experience with Palo Alto's GlobalProtect VPN - Prisma Access cloud and NGFWs;
• High proficiency with designing, implementing, and troubleshooting a wide range of network security platforms and VPN technologies such as Palo Alto, f5, AWS, Cisco;
• Experience in building, migrating & supporting enterprise VPN platforms and systems for Desktop (macOS, Windows) & Mobile (iOS, Android), and / or SASE based solutions by test driving proof of concept and deployment of security solutions;
• Ability to problem solve in a complex and ever changing environment;
• Advanced proficiency with leveraging network security management tools and performing packet analysis during incident / problem resolution;
• Excellent interpersonal and communication skills (both verbal and written). Must be able to represent the team well and effectively communicate / share technical information to a variety of individuals, peers, and stakeholders;
• Excellent analytical and problem-solving skills to help detect, communicate, and fix issues while adopting Site Reliability Engineering (SRE) principles so that the availability and performance of the investments in IT networks are optimal;
• Excellent time management skills across multiple projects and distributed teams;
• Encourage innovation, implementation of cutting-edge technologies, inclusion, outside-of-the-box thinking, teamwork, self-organization and diversity;

Willingness to update and contribute to living engineering documentation

• Must be ready to work flexible hours and need to adjust to changing environments;
• Must be prepared for physical work which may involve lifting and carrying equipment of up to 50lbs, besides moving, racking and installing them, if necessary;
• Knowledgeable about IPSec tunnels and encryption, VPCs, VRF, TCP / IP, OSI model, IPv6, cloud based network security architecture, VPN deployment strategies & migrations, data traffic manipulation, Proxy, Load Balancers, DNS / Route53;

Good to have knowledge on : general network concepts, protocols, any scripting experience, CM tools including Ansible and Terraform, and a variety of AWS tools and services

Reason For Request : Utilize the next generation VPN design that provides Always on Access to associates with direct access from the Bangalore office through the cloud and provides local access points for associates when working outside the office.

This design provides better connectivity than the existing VPN solution and moves other core networking services closer to the associates to provide a better experience.