Network Security Engineer (Remote Available)

Discover Vanderbilt University Medical Center:  Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of diverse individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health recognizes that diversity is essential for excellence and innovation. We are committed to an inclusive environment where everyone has the chance to thrive and where your diversity of culture, thinking, learning, and leading is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.

Organization:

VEC SEO

Job Summary:

Responsible for the operation of network security enterprise devices under occasional guidance. Provides security monitoring and operational service management and participates in network security design projects. Troubleshoots and resolves complex network security issues. Consults on projects as required. Implements small and medium architecture projects or components of large projects—the ability to solve medium to complex problems that range from layer 1 - 7 of the OSI stack. The position has a once every 5 weeks on-call rotation that has potential after-hours engagements.

.

KEY RESPONSIBILITIES

• Identify, deploy, and maintain network infrastructure security technologies (Palo Alto Networks NGN Firewalls and associated services).

• Implement infrastructure security architecture design and recommendations. 

• Assist in the development of an enterprise network defense strategy for the VUMC organization.

• Familiar with the following platforms/providers functions, features, and services (Palo Alto Networks, Cisco, F5, ) - Preferred Palo Alto Networks.

• Provides advanced network knowledge and troubleshooting capabilities.

• Skilled in networking concepts

• Familiar with Cisco ACI (Software defined networking concepts)

• Independently delivers on objectives with an understanding of how they impact the results of own area/team and other related teams.

• Utilizes multiple sources of data to analyze and resolve complex problems; 

• Knowledgeable in remote connectivity solutions (IPsec, ESP, SDWAN ) .

• Preferred experience with Palo Alto Networks and Prisma Access solutions

• Familiar with Microsoft O365 Security products and services

• Understanding of virtualization and Linux/Windows OS's

• Capable of deploying firewalls and threat prevention systems: security gateways (application/web (WAF)

• Establish solutions to conduct security assesments and audits

• Implement, troubleshoot, and maintain VPN connections (SSL/IPsec/SDWAN)

• Strong verbal and written skills

 

Platforms/Technologies

• Palo Alto Networks ( PAN-OS, Prisma suite, Sectra)

• Cisco (Cisco-IOS)

• F5 (AWAF)

• Atlassian (JIRA)

• MS O365

• Terminal Emulator (Putty / SecureCRT)

• PRTG

TECHNICAL CAPABILITIES
• Network Forensics (Novice): Possesses sufficient fundamental proficiency to successfully demonstrate Network Forensics in practical applications of moderate difficulty.
• Security Troubleshooting (Intermediate): Demonstrates the ability to identify, locate, isolate, and resolve complex problems relating to information security and related areas. Able to make use of all of the advanced capabilities of the primary diagnostic tools and analyzers available. Familiar with the capabilities of vendors to find and fix problems. Capable of finding solutions and answers beyond the area of specialty. Displays the competence to implement solutions that may go beyond the scope of immediate problem. Demonstrates persistence and thoroughness.
• Security Monitoring (Intermediate): Demonstrates mastery of Security Monitoring in practical applications of a difficult nature. Conducts research into security intrusion trends and manages specific security monitoring projects. Identifies, investigates, documents, and reports security incidents and risks as related to monitoring activities. Demonstrates advanced proficiency in use of the Company's Security Monitoring software and tools. Works with behavioral-based technology that helps limit the impact of an incident once it occurs.
• Firewall Management (Intermediate): Has a solid understanding of i