Who We Are 

We are a firm that values and respects our staff, fosters an environment that encourages learning and growth, and is committed to the success of our clients. 

At PAE, we like to think of ourselves as a little bit different from most engineering firms. Here’s why: 

• We care intensely about envisioning and creating sustainable building systems and work every day to break new ground in the world of sustainable design. 
• We have a close affinity to the visions of the architects we work with; we understand the need for beauty as well as practicality. 
• We value creativity as much as we value precision. 
• We understand that the visionary people we want to hire need to experience the world in order to change the world, and we work hard to support that need. 

What You'll Do

The Security and Network Specialist is responsible for the design, administration, and support of PAE’s information security infrastructure and networks. Successful candidates will have strong experience with SIEM tools, pen testing, threat intelligence, next generation firewalls, LAN/WAN protocols and technologies, wireless networks, cloud networking and security, monitoring systems, and full stack troubleshooting. 

• Lead as the primary information security authority for security-related tool deployments, monitoring, incidents, new initiatives, and escalations
• Conduct regular security audits, risk assessments, and ensure compliance with security standards and framework
• Implement or update company-wide information security policies and procedures
• Design, deployment and management of new and existing network infrastructure and services, including on-prem and in-cloud next generation firewalls, load-balancers, switches, VPNs, and information security measures
• Monitor and test network performance; proactively develop and communicate network performance statistics and reports
• Recommend, schedule, and perform information security and network improvements, upgrades, and repairs
• Identify and respond to security vulnerabilities and work with our SOC team towards resolution
• Manage telecom and service providers to ensure SLAs are met and service value is maximized for the business
• Configure system logs, monitoring tools and alerting for servers, firewalls and network devices
• Serve as an escalation point for our IT Service Desk for security and networking-related issues
• Participate in audits and rehearsals associated with Business Continuity and Disaster Recovery
• Participate in the execution of IT Service Management (ITSM) controls (e.g., incident, problem and change management), including after-hours operations, maintenance, and on-call support
• Participate in the development of operational IT documentation (e.g., infrastructure diagrams, standards, policies, procedures, training)
• Stay current with network, cloud, and information security technologies via workshops, vendor training events and online training
• Analyze network monitoring, security, and vulnerability reports, developing mitigation strategies for vulnerabilities identified in assigned functional areas; proactively report on status of mitigations

What You Bring

• Bachelor’s Degree in information technology and related technologies or equivalent industry experience
• 5 years of IT work experience managing information security and complex network and information security appliances as a Network Security Administrator, Specialist, or Engineer
• Experience in the implementation of security measures in cloud environments
• Experience on incident response teams, disaster recovery and rehearsals, and major change rollouts
• Strongly preferred - experience with Azure security and network technologies including Azure Sentinel, Vnets and Vnet peering, VPN, WAFs, and load balancers
• Preferred – security certifications in one or more of the following: CISSP, OSCP, CISM, Security , CySA or related
• Preferred - vendor certifications in one or more of the following: Juniper, Fortinet, Cisco, Microsoft Azure
• In-depth knowledge and experience with the following:
  • Skills associated with SIEM tools and respective query languages (ie KQL), and the ability to analyze and interpret security data
  • Design, configuration, monitoring, and maintenance of next generation firewalls and switches
  • Non-proprietary network switching, routing, and information security protocols and standards
  • Wireless planning, design, and troubleshooting with enterprise-grade 802.11ax
  • Dynamic routing protocols including OSPF and BGP; network services including LDAP, DHCP, DNS, RADIUS, etc.
  • Design of high-performance and high-availability enterprise LAN/WAN infrastructure including SDWAN
  • Documentation of complex environments including runbooks and diagrams
• Advanced knowledge of cloud network technologies, including Microsoft Azure, Google Cloud Platform, and AWS
• Proficiency with penetration testing, ethical hacking, digital forensics, and threat intelligence
• Experience with networking hardware and software including but not limited to Juniper, Fortinet, Azure, OpenGear, and Cisco
• Working knowledge of one or more information security standards (e.g., ISO 27001, NIST, CMMC), and best practices
• Working knowledge of Windows Server operating systems and virtual machines in both on-prem and in-cloud environments
• Experience working with technology partners and vendors to manage delivery of desired outcomes
• Strong verbal and written communication skills
• Excellent customer service skills
• Experience working as a key member in an IT team, with proven problem-solving skills
• Location: This is a hybrid position located in San Francisco, California

What We Offer 

• Hiring Base Salary Range: $113,900 - $156,300 annual
  • This position is eligible for straight time overtime pay 

The base salary is one component of PAE’s competitive compensation package for employees. We take into consideration a variety of factors including but not limited to skills, abilities, experience, education, credentials, internal equity and geographic location in determining exact salary offered. At PAE, roles are eligible for additional rewards, including salary increases and annual bonuses based on individual performance. The above range represents PAE's good faith and reasonable estimate of the range of possible compensation at the time of posting. 

In addition, PAE offers a comprehensive benefits package which includes the following: 

• Performance Bonus 
• Employer paid health insurance (medical, dental, vision) 
• 401k account contribution 
• Professional development reimbursements including state registration and professional association dues 
• Commuter benefit 
• Cell phone stipend 
• Life insurance and disability benefits 
• Employee Assistance Program 
• Paid time off for sick leave, family leave, community service, holidays and vacation- work hard and take time off when you need it. 
• To learn more about our comprehensive benefits package, visit https://www.pae-engineers.com/careers/benefits. This information is provided per the Equal Pay Act. 

Our commitment to pay equity 

PAE is a JUST label certified company; we demonstrate JUST label requirements within pay equity. Pay scales should meet or exceed applicable legislated wage requirements and industry standards and compensate, on the same basis, all individuals performing the same or similar work and work of equal value. We are committed to the principle of pay equity – paying employees equitably for substantially similar work. To learn more about pay equity and our commitments to equitable business practices, you may view our JUST label certification here: https://just.living-future.org/s/organizations/20-organizations/pae

To find out more visit our website: https://www.pae-engineers.com/values 

What We’re Made Of 

Established in 1967 and stretching across five offices on the West Coast, PAE provides services in mechanical, electrical, and plumbing engineering, building performance analysis, technology design, and lighting design (LUMA). We work with clients to design the nation’s highest performing and most regenerative built environments that keep people comfortable, healthy, and productive inside while restoring the natural world outside. We employ an integrated and responsive approach to project design that balances the environmental, economic, and social goals of every client we work with. 

Our portfolio includes over 100 LEED Platinum projects as well as dozens of projects that have either achieved or are pursuing the Living Building Challenge, Passive House, Architecture 2030, Carbon Neutral, Net Zero Energy, and Net Zero Water. 

Fine Print 

Please note that resumes received from third party recruiters or agencies will not be accepted unless requested directly by PAE Talent Acquisition and with a prior signed fee agreement. If candidates without a previously signed recruiter fee agreement are submitted, PAE reserves the right to engage with and hire those candidate(s) without any obligation financial or otherwise to the recruiter or agency.

In order to provide equal employment and advancement opportunities to all individuals, employment decisions at PAE will be based on merit, qualifications and abilities. PAE does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender (sex), national origin, age, veteran status, sexual orientation, gender identity, physical characteristics historically associated with race, disability, genetic information or any other characteristic protected by applicable law. 

PAE will make reasonable accommodations for qualified individuals with known disabilities unless doing so would result in an undue hardship. This policy governs all aspects of employment including: selection, job assignment, compensation, discipline, termination and access to benefits and training. 

#LI-hybrid