Senior Network Security Architect

Top Skills

Palo Alto

Juniper SRX

Cisco routing and switching

Cisco ICE, Aruba Clearpass

Cloud Security

At least one cert: PCNSE, JNCIP-SEC/JNCIE-SEC, CISSP

Projects:

Firewall replacement

Migration from physical to virtual firewalls

End of life Palo Alto Firewall replacement

Adding new Firewalls

Replacing Clearpass

ETLS Setup on Wireless

• Essential Functions: Design and Implementation – Perform multi-vendor firewall migration, proof of concept/new product design for security platforms, network policy design, and gap analysis for security initiatives. Conduct penetration and vulnerability testing and reporting. Create network design documentation based on the requirements and best practices. Build a secure, efficient, and scalable network infrastructure that meets organization's needs & standards. Build network configurations and installations, coordinate network changes, and communicate with impacted stakeholders. This role may also install and configure Cisco LAN, WAN, and wireless infrastructure, assist in maintaining the operating system and security software used on the network, and perform maintenance to enhance network availability
• Support – Provide support to the production environment and ensure that the appropriate security policies and practices are implemented and enforced. Act as the highest level of engineering escalation for production issues. Provide system support and troubleshooting expertise as needed for designed solutions. Provide technical and tactical support to team subordinates as needed. Participate in the development of incident response plans and procedures to detect, respond to, and recover from security incidents and breaches
• Research - Understand advances and changes in the technology industry. Collaborate with vendors to evaluate and adopt evolving technologies to meet rapidly changing requirements. Collaborates to test and implement new solutions.
• Accurate and timely reporting of time in PPM tool

• Qualifications: Bachelors degree in Information Technology, Computer Science, or related advanced science or engineering field or equivalent work experience required. Master’s degree preferred.
• 5 years Experience in designing & implementing large-scale network security infrastructure both on-prem and cloud required. 5 years Experience in deploying, migrating & automating the network security infrastructure in large-scale environments required. 5 years Experience in designing & managing centralized multi-vendor firewalls required. 5 years Experience in any of these routing protocols (BGP. OSPF, EIGRP) is preferred. 5 years Experience in various SDLC methodologies (i.e. Agile, Hybrid, Waterfall, etc.) and project management practices required. 1 years in the cruise and/or travel industry preferred.

• Knowledge, Skills and Abilities: Strong knowledge of various network security technologies such as Firewall (Juniper or Palo Alto), IPS, AV, Micro-segmentation, Zero-Day attack, Cloud security group management, MFA & Analytics, and Network detection and response.
• Generic knowledge of Network security concepts in Virtualization platforms such as Kubernetes & VMware
• Knowledge of EVPN VXLAN is a plus
• Excellent organizational skills and time-management skills
• Ability to think critically, problem solve creatively and perform root cause analysis.
• Flexibility to adjust to changing priorities and deadlines.
• Analytical and detailed oriented with a strong business sense
• Ability to manage tight deadlines, prioritize workload, and achieve effective results.
• Ability to write comprehensive and concise technical reports and presentations to be consumed by non-technical individuals.
• Ability to create PowerPoint presentations that are informative and engaging and deliver them to various audiences including management.
• Excellent communication, team building, conflict management, and organizational skills
• Proven track record of working collaboratively with cross-functional teams to achieve common goals and drive results.
• Proficiency in MS Office.
• Ability to quickly learn new technologies and concepts

• Licenses & Certifications: CCNP - Cisco Certified Network Professional upon hire preferred
• PCNSA upon hire pre