SR Network Security Engineer

It’s a great time to join AAA The Auto Club Group! 

JOIN THE TEAM COMMITTED TO DRIVING YOUR CAREER FORWARD

Job Type:

Full time

 

Exempt/Non Exempt:

 

Salary

Job Description:

 

Position Description

Primary Duties and Responsibilities (details of the basic job functions):

Provides senior-level engineering for the Network Security Engineering Team. Closely works with the team to develop and maintain a comprehensive security engineering program, including policies, processes and standards for the engineering of firewalls and other technologies. Participates in the design, build and implementation of architecture changes. Participates in strategic planning. Performs engineering of platform changes that impact architecture and connectivity. Responsible for enabling new features and functions. Design and placement of additional security appliances in new areas of the network. Migrating systems from on-prem to the cloud. Responsible for the transition of system accountability from engineering to operations. Respond to system outage escalations during normal business hours as needed.

In addition, the SR Network Security Engineer will discover and collect information from the environment to complete design and implementation planning. The SR Network Security Engineer will refresh their knowledge on current technologies while expanding on others and provide technical expertise for these technologies. Provides technical oversight of CapGemini operations and project work.

Supervisory Responsibilities (briefly describe, if applicable, or indicate None):

none

Required Qualifications (these are the minimum requirements to qualify)

Education (include minimum education and any licensing/certifications):

• Bachelor degree in related field or equivalent work experience

Experience:

• 7+ Years firewall engineering, implementation and support experience.
• 3+ Years implementing and supporting VPN’s to multi-vendor termination points.
• Previous experience working in a large firewall environment and managing large complex firewall policies.
• Assisting and training team members in the use of security tools and troubleshooting.
• Developing and maintaining documentation for systems and procedures.
• Securing an environment with Regulatory requirements such as PCI, FFIEC, or Gramm-Leach-Bliley Act
• Adhering to change control procedures and windows.
• Providing detailed plans for change windows.

Knowledge and Skills:

• Working knowledge of Network infrastructure, including routers, switches, firewalls, and the associated TCP/IP network routing protocols and concepts.
• Strong knowledge of tcpdump.
• Strong knowledge of routing fundamentals.
• Knowledge of Security concepts and ability to apply them to business processes (concept of least privilege, concept of locking down, integration/production environments), etc.
• Strong team-oriented interpersonal skills with the ability to effectively interface with a broad range of internal/external contacts and roles, including end users, vendors and IT-business personnel.
• Strong analytical and troubleshooting skills.
• Ability to work well under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously.
• Work proactively and independently.
• Network security technologies (e.g. SIEM, DLP, Firewalls, IDS, IPS, application proxies)
• Excellent presentation, persuasion, written and interpersonal skills to include procedure and technical material, report/proposal preparation and oral presentation.
• Contribute and collaborate as a lead member of a team
• System development life cycle
• Analyzing business problems and developing recommendations and engineering solutions for management and/or senior staff review
• Supporting Troubleshooting and resolving problems when required by the operations team
• Regulatory and compliance requirements (such as PCI, FFIEC, GLBA)
• Organization’s security policies, standards and controls
• Work with the User and IT community to understand security issues and develop security solutions
• Learn new security concepts and technologies
• Learn how a security issue may affect events across the department/enterprise
• Write security procedures and technical materials to be used by the operations team

Preferred Qualifications

• Experience with security in the cloud (AWS, Azure, or Google)
• Experience engineering solutions with Checkpoint