Sr. Network Engineer

Summary:

As a Sr. Network Engineer, you will be responsible for designing, implementing, maintaining, and securing our company's network infrastructure to accommodate business requirements across multiple sites. You will be the lead in ensuring the security, reliability, and performance of our network systems. This position requires extensive networking experience utilizing Cisco switches and FortiGate firewalls along with other network products such as Wireshark, Tenable Nessus, Forescout, FortiNAC, Visio, PRTG, and SolarWinds.

Essential Job Responsibilities and Duties:

• Design, implement, and maintain network infrastructure using Cisco switches/routers and FortiGate firewalls.
• Configure and optimize network switches, routers, and firewalls to ensure high availability and performance.
• Implement and manage dynamic routing protocols such as EIGRP and OSPF.
• Monitor network performance using tools such as FortiManager, FortiAnalyzer, PRTG and SolarWinds to troubleshoot issues and ensure seamless operation.
• Manage network access control using FortiNAC to ensure secure and compliant network access.
• Implement network security measures, including firewalls, VPNs, intrusion detection/prevention systems, and RADIUS authentication.
• Manage PKI certificates for secure network communications.
• Automation tasks using common scripting tools such as PowerShell, SQL, and Python.
• Conduct packet sniffing & analysis using Wireshark to diagnose and resolve network issues.
• Perform vulnerability scanning using Nessus by Tenable to identify and generate detailed vulnerability reports to mitigate security risks.
• Develop and maintain network documentation, including diagrams, configurations, and procedures using Visio.
• Collaborate with cross-functional teams to support network-related projects and initiatives.
• Stay up-to-date with industry trends, best practices and changing customer requirements to ensure the continuous improvement of our network infrastructure.
• Provide technical guidance and mentorship to junior network engineers.
• Manage and execute network projects from inception to completion, ensuring timely and successful delivery.
• Evaluates and recommends cost effective platforms and products which offer the most business value in terms of scalability and security.
• Resolves root cause of infrastructure related issues at any time, escalating support as needed.

Other Responsibilities and Duties:

Serve as the ADVICS Regional Investigator and security lead for the NA Aisin Group CSIRT Organization. 

• Function as the liaison between ADVICS companies and the parent group to investigate all potential cyber threats.
• Coordinate / conduct training for ADVICS Security Champions and end users.
• Categorize and assign security tickets to other IT staff members based on identified vulnerabilities and track their progress to ensure timely resolution and remediation.
• Work directly with the Security Champions within the business
• Collaborate with team members to implement remediation plans and verify vulnerability mitigation.
• Maintain comprehensive documentation of security findings, remediation activities, and provide regular updates to management.

Work Environment and Physical Demands:

While performing the duties of this job, the employee is regularly required to talk or hear; and is frequently required to sit; and walk.  The employee is occasionally required to use hands to finger, handle, or feel objects, tools, or controls; and reach with hands and arms.

The employee must occasionally lift and/or move up to 25 pounds.  Specific vision abilities required by this job include close vision for reading and writing purposes.

While performing the duties of this job, the employee occasionally works near moving mechanical parts in wet conditions.

The noise level in the work environment varies from moderate to loud.

Qualifications:    

Education and Experience:  

Associates or Bachelor’s degree in related field from a two or four-year college, university or technical school; and/or four years of related experience and/or training; or equivalent combination of education and experience. Must also have 5-10 years of relevant experience.

Special Skills:

Must have several years of experience and strong working knowledge with FortiGate firewalls.  Experience and strong working knowledge of other Fortinet solutions such as FortiAnaylzer, FortiManager, FortiNAC preferred.

Must have several years of experience and strong working knowledge with Cisco switches and routers including Catalyst and Nexus Switches, dynamic routing protocols (OSPF/EIGRP/etc), access lists, etc.

Must have deep expertise in infrastructure security and network design involving each layer of the OSI model, particularly with layer 2/3 design and troubleshooting.

Must have strong LAN/WAN/Wireless/Security knowledge and comprehensive understanding of major data networking technologies and concepts with Meraki experience preferred.

Must have knowledge of datacenter networking as it relates to storage and virtualization.  VMware and experience with Nexus VPCs preferred.

Strong knowledge of network protocols (e.g., TCP/IP, BGP, OSPF, VLANs, STP, EIGRP).

Must have strong working knowledge of RADIUS and PKI/Certificate authentication across multiple platforms.

Must be able to perform site surveys, spectrum analysis and channel utilization using site survey tools.  Demonstrate basic RF knowledge beyond static coverage maps.

Experience with using network monitoring tools such as SolarWinds, Wireshark, NetFlow, PRTG and others to troubleshoot and resolve issues.

Must be able to debug, parse and comprehend data communication at the packet level.

Experience with using security scanning and monitoring tools such as Tenable Nessus, Splunk, Microsoft Sentinal, etc to remediate and mitigate security vulnerabilities.

Working knowledge of Microsoft Windows Servers & Clients, Active Directory, DNS, DHCP.

Must be able to function in a team environment by working with and cooperating with others.

Requires a high level of interpersonal skills, written and verbal communications skills, and the ability to deal effectively with individuals both inside and outside of the company in a professional and confidential manner.

Must be pro-actively involved in continuous improvement processes and team-based systems and have the ability to effectively promote their use throughout the company.

Project management and problem-solving abilities.

Certificates, Licensees, Registrations:

CCNA/CCNP, MCSE, VCP, CISSP, NSE 4 , PMP or higher certifications are a plus.