Associate Principal, Network Engineering

Summary

This role is responsible for

• Network policy, governance, and compliance
• Supporting, administrating and overseeing network support
• Design and analysis of new and existing architecture
• Routing/switching configuration, design and compliance
• Network related business continuity approaches
• Develop systems specifications, technical/procedural implementation plans
• Coordinating complex projects with clients and vendors.
• Works with a team performing network design and support of new network and security architectures for “on premise” and Cloud networks.

Primary Duties and Responsibilities

• Oversee the full lifecycle of network infrastructure, including the design, deployment, support, compliance and documentation of routing, switching, firewalls and cloud-base solutions. 
• Lead and coordinate network changes, ensuring security, performance and compliance with governance framework (NIST-CSF, COBIT). 
• Collaborate with vendors, carriers, and engineering teams to resolve complex issues and drive large-scale project to completion. 
• Provide strategic direction for network planning, maintaining up-to-date documentation and deliver on-call operational support to ensure reliability and business continuity.
• Lead and coordinate the development, implementation and management of policies, procedures and controls.
• Create and manage Risk Intakes/Acceptance(s) when required.
• Lead and support Vulnerability Management efforts.
• Proactively maintain awareness of policy and procedure changes that could affect networks compliance.
• Work with and manage requests for documentation from Auditors or Exams.
• Maintain an accurate inventory of Business Applications and Devices in Service-now.
• Create, update, and validate Configuration Baselines for Network applications and equipment.
• Perform consistent compliance Audit/validations throughout the network.
• Lead remediation efforts related to findings and observations in areas of responsibility. Ensure remediation addresses root cause, improves OCC’s residual risk and is completed in a timely manner

Supervisory Responsibilities

• None

Qualifications

• [Required] Excellent presentation skills including planning, material preparation and public speaking
• [Required] Demonstrated capability to tailor communications to the technical level of the audience
• [Required] Clear, concise and precise written and verbal communication skills to effectively communicate with people of various backgrounds
• [Required] Strong interpersonal, leadership, project management and mentoring skills
• [Required] Strong ability to use solution-oriented approach towards problem resolution
• [Required] Ability to work independently and be a team player

Technical Skills

•  [Preferred] Experience working in and developing solutions for a highly regulated environment or organization that leverages a security framework (such as NIST, COBIT, etc)
•  [Required] Experience directing use of tools such as Ansible, Terraform, Jenkins, Python, and Github (or industry equivalent)
• [Required] Experience delivering Infrastructure as code
• [Required] Experience building cloud infrastructure in environments such as AWS (Preferred), Azure, or Google Cloud, or similar service
•  [Preferred] Knowledge of Controls, Risk Ranking/mapping, Remediation items and general IT audit
•  [Preferred] Understanding of NIST Special Publication 800-53 (Rev. 4) and COBIT framework
• [Required] Advanced experience with architecting, designing, deploying, and operating network elements such as DNS/IPAM; Firewalls; Network Access Control Solutions (NAC); load balancing; DDoS mitigation, tapping/sniffing infrastructures; and NTP
•  [Preferred] Experience with Cisco IOS/NX-OS configurations
•  [Preferred] Experience with GRC Technologies such as Archer
•  [Preferred] Experience with CIS Benchmarks

Education and/or Training

• [Required] Bachelor’s degree, preferably in a technical discipline (Computer Science, Mathematics, etc.) or equivalent combination of education and experience.
• [Required] 5+ years of experience in IT systems installation, operations, administration, and maintenance of virtualized servers / cloud systems

Certifications

• [Preferred] Relevant industry certifications such as Microsoft Azure or Google Cloud
• [Preferred] Cisco Certified Network Professional (CCNP or CCDP) equivalent field experience
• [Required] AWS certifications such as DevOps Engineer, Solutions Architect, Advanced Networking, or Security or equivalent field experience
• [Pr