Summary

The Sr. Security Engineer will provide support for a diverse set of security technologies in a metropolitan enterprise IT environment and complies with SLAs for high availability and uptime.  The security engineer responds to security incidents, including security attacks, breaches, and unauthorized access and identifies remediation and investigation strategies and countermeasures necessary to protect customer assets.  The security engineer provides information security support to the customer’s enterprise IT infrastructure, including cloud technologies, WAN, LAN, WLAN, Data Center, Internet, ISPs, and others.  The security engineer will support, manage, and provide maintenance for various firewall platforms, including Palo Alto, Cisco ASA and Firepower, and Check Point.  The security engineer will install, manage, and maintain F5 Big IP, Infoblox, DNS solutions, third-party security solutions and others. 

Responsibilities

• Troubleshoot, diagnose, and resolve or escalate Incidents and problems with internal and external groups (Data Center Services, application support teams, escalations, the NOC, vendors, ISPs, etc.)
• Configure and install Firewalls, VPN Concentrators, F5 Big IP, and Infoblox including IMAC requests, in accordance with ITIL best practices using ServiceNow
• Design and implement best practice security solutions (tools and services) to mitigate security threats and risks that may impact the business
• Perform day-to-day operational tasks to maintain network security
• Work with operations, data center, and application owners to ensure high availability (HA) systems, performance matrices, and other reporting mechanisms to meet SLAs
• Collaborate with the Senior Network Architect on network design improvements, capacity planning, risk mitigation, vulnerability, and security event management
• Configure/modify firewalls and ACLs, set up VPN tunnels
• Perform security device configuration management

Requirements

• Bachelor’s in Security Engineer related field and 5 years of experience in metropolitan and multi-site enterprise IT networks supporting >5000 users
• Current PCNSE Palo Alto certification (preferred)
• (ISC)² CISSP or Cisco CCNP security certification (preferred)
• Strong security and network troubleshooting skills
• Hands-on experience maintaining F5 Big IP, Infoblox, Palo Alto, Cisco ASA, and Firepower firewalls
• Experience with identity and access control policy tools i.e., Cisco Identity Services Engines (ISE) / Cisco TrustSec

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

COVID-19 Vaccine Statement

This opportunity may require a COVID-19 vaccine based on SDI Presences clients’ requirements and/or guidelines in the future.

Equal Opportunity Employer Statement

SDI Presence is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. SDI Presence makes hiring decisions based solely on qualifications, merit, and business needs at the time.

Staffing Firms

SDI Presence does not seek or accept unsolicited resumes or CVs from recruitment agencies. We are not responsible for, and will not pay, any fees, commissions, or any other payment related to unsolicited resumes or CVs except as required in a written contract between SDI Presence and the recruitment agency or party requesting payment of a fee.