Network Security Administrator

About Us:

LTIMindtree is a global technology consulting and digital solutions company that enables enterprises across industries to reimagine business models, accelerate innovation, and maximize growth by harnessing digital technologies. As a digital transformation partner to more than 700 clients, LTIMindtree brings extensive domain and technology expertise to help drive superior competitive differentiation, customer experiences, and business outcomes in a converging world. Powered by nearly 90,000 talented and entrepreneurial professionals across more than 30 countries, LTIMindtree — a Larsen & Toubro Group company — combines the industry-acclaimed strengths of erstwhile Larsen and Toubro Infotech and Mindtree in solving the most complex business challenges and delivering transformation at scale. For more information, please visit www.ltimindtree.com.

Role Title: Information Security Network Analyst

Job Description:

The ECS contractor position will be responsible for assisting in the engineering of the application connectivity through Security Operations (SECOPS) managed firewalls, the creation and management of the documentation for the connectivity in the CCR and reviewing the Firewall Change Request for accuracy and compliance to support all third-party connectivity. You will ensure third parties are registered in CASP database and the requested applications are listed in the CSI or CTC. You will confirm network connectivity by accessing network equipment and confirm configurations and status. You will work with client organizations, Helpdesk and other CT groups to ensure all firewall and ACL related troubles are corrected and documented in a timely manner. You must possess the ability to document any new policies and/or procedures into the appropriate format. You will work with other group members to ensure that the Process Control Management documentation and other documentations (drawings, databases, spreadsheets, etc.) are up to date and accurate.

Job Responsibilities:

As a member of External Connectivity Security Team (ECS) you will:

Process Firewall, Proxy, RAS requests and perform risk assessments to ensure that the connectivity is compliant with Citi Information Security Standards and IS Policies.

Provide Information Security oversight and guidance to Citi businesses requiring 3rd party connectivity as it relates to Citi Information Security Standards and IS Policies.

Liaise with multiple technology teams (i.e., CATE Network Engineering; Proxy OPs and Integration; Perimeter Security Ops; System Based Computing; Remote Access Services and Business Information Security Officers); to facilitate cross functional solutions as it relates to 3rd party connectivity aligning with Citigroup Information Security Standards.

Modality solutions include (but not limited to) RAS, B2B, Firewall; Proxy; and TPA solutions.

Test and pilot system enhancements/changes and/or other.

Identify and develop new and improved technical procedures and process control manuals.

Identify significant IS threats and vulnerabilities as it relates to connectivity requests.

Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• Firewall Administration min 3 years; ideally 5 years
• Network Administration min 3 years; ideally 5 years
• CCNA Certification or equivalent knowledge in Networking
• TCP/IP Protocols IPSec/GRE/VPN Project Management 1 – 3 years
• Management of Technology Projects including Platform Migration Data Migration Network/Firewall Connectivity 1 - 3 years
• Administration Security Configuration Scripting Web Services and FTP Encryption 1 – 3 years
• Routing Configuration Access Control Lists TCP/IP Protocols IPSec Preferred Skills
• Solid Data Networking & Network Security Experience with Cisco Routers & Switches, Checkpoint Firewalls, Palo Alto Network Firewalls.

Key Responsibilities:

Collection of metadata, validation and registration of Firewall/ACL and Proxy rules related to migrations.

Validating legacy connectivity for ownership, registration, and usage

Providing support of Business requests for Changes and validation

Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Experience at a Global Bank or Global Financial institution preferred

Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree (“LTIM”):

Benefits and Perks:

• Comprehensive Medical Plan Covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.

Disclaimer: The compensation and benefits information provided herein is accurate as of the date of this posting.

LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family-care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.