Sr. Network Security Architect

The Sr. Architect, Network Security is responsible for the design and implementation of enterprise security strategies, architectures, and solutions to protect the company's network and meet compliance requirements.  This role is responsible for the production environment and ensuring that the right security policies and practices are implemented and enforced, including conducting client penetration and vulnerability tests and reports.  This position collaborates with IT, Information Security, and business area contacts to develop secure, scalable, and cost-effective solutions. 

Essential Functions:

• Design and Implementation – Perform multi-vendor firewall migration, proof of concept/new product design for security platforms, network policy design, and gap analysis for security initiatives. Conduct penetration and vulnerability testing and reporting. Create network design documentation based on the requirements and best practices. Build a secure, efficient, and scalable network infrastructure that meets organization's needs & standards. Build network configurations and installations, coordinate network changes, and communicate with impacted stakeholders. This role may also install and configure Cisco LAN, WAN, and wireless infrastructure, assist in maintaining the operating system and security software used on the network, and perform maintenance to enhance network availability
• Support – Provide support to the production environment and ensure that the appropriate security policies and practices are implemented and enforced. Act as the highest level of engineering escalation for production issues. Provide system support and troubleshooting expertise as needed for designed solutions. Provide technical and tactical support to team subordinates as needed. Participate in the development of incident response plans and procedures to detect, respond to, and recover from security incidents and breaches
• Research - Understand advances and changes in the technology industry. Collaborate with vendors to evaluate and adopt evolving technologies to meet rapidly changing requirements. Collaborates to test and implement new solutions.
• Accurate and timely reporting of time in PPM tool
• Upholds the Carnival Cruise Lines’ values of respect, teamwork, integrity, and excellence in all activities

Qualifications:

• Bachelors degree in Information Technology, Computer Science, or related advanced science or engineering field or equivalent work experience required. Master’s degree preferred.
• 5+ years Experience in designing & implementing large-scale network security infrastructure both on-prem and cloud required.  5+ years Experience in deploying, migrating & automating the network security infrastructure in large-scale environments required.  5+ years Experience in designing & managing centralized multi-vendor firewalls required.  5+ years Experience in any of these routing protocols (BGP. OSPF, EIGRP) is preferred.  5+ years Experience in various SDLC methodologies (i.e. Agile, Hybrid, Waterfall, etc.) and project management practices required.  1+ years in the cruise and/or travel industry preferred.

Knowledge, Skills and Abilities:

• Strong knowledge of various network security technologies such as Firewall (Juniper or Palo Alto), IPS, AV, Micro-segmentation, Zero-Day attack, Cloud security group management, MFA & Analytics, and Network detection and response.
• Generic knowledge of Network security concepts in Virtualization platforms such as Kubernetes & VMware
• Knowledge of EVPN VXLAN is a plus
• Excellent organizational skills and time-management skills
• Ability to think critically, problem solve creatively and perform root cause analysis.
• Flexibility to adjust to changing priorities and deadlines.
• Analytical and detailed oriented with a strong business sense
• Ability to manage tight deadlines, prioritize workload, and achieve effective results.
• Ability to write comprehensive and concise technical reports and presentations to be consumed by non-technical individuals.
• Ability to create PowerPoint presentations that are informative and engaging and deliver them to various audiences including management.
• Excellent communication, team building, conflict management, and organizational skills
• Proven track record of working collaboratively with cross-functional teams to achieve common goals and drive results.
• Proficiency in MS Office.
• Ability to quickly learn new technologies and concepts

Licenses & Certifications:

• CCNP - Cisco Certified Network Professional upon hire preferred
• PCNSA upon hire preferred

Physical Demands:  Must be