Engineer - Network Security

Iberdrola•Orange, CT

23d•$96,400 - $120,500•Onsite

About The Position

The Engineer – Network Security role performs as a technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. This role will support the engineering, installation, maintenance and administration of all technical aspects of corporate network security including software and hardware. The incumbent will be responsible for translating business requirements into secure network solutions or process designs. The Engineer – Network role reports into the Sr. Manager – IT Security.

Requirements

Bachelor's degree in Computer Science, Information Systems or a related field of study with a minimum of two (2) years of hands-on experience in network engineering, including operational support and troubleshooting of enterprise firewalls, secure web gateways and web application. An equivalent combination of education and experience may be considered.

Nice To Haves

Certifications: Fortinet NSE, Palo Alto PCNSE, Checkpoint CCSA/CCSE, Zscaler Certified Professional, Akamai Security certifications.
Experience assisting in the deployment, configuration, and maintenance of SDWAN solutions is highly desirable.
Experience working with secure web gateways: Zscaler
Experience with web application firewalls: Akamai.
Experience troubleshooting of enterprise firewalls: Fortinet, Palo Alto Networks, and Checkpoint

Responsibilities

Supports IT Network Security in projects, by gathering business requirements and architects / designs new network solutions to meet business needs, global standards and network & security design standards.
Interacts with global counterpart to reach agreement on solutions. Manage relationship with outsourced vendors and coordinates the execution of the design plan. Ensures that all aspects of the architecture are executed to plan.
Consistently reviews performance of existing infrastructure; plans and executes lifecycle upgrades as required to meet/exceed existing SLAs. Plans, coordinates, communicates and executes upgrades, partners with cross functional teams as required.
Partners with outsourced vendors in support of the executed design plan.
Analyzes current state and proposed network related infrastructure and conducts risks assessments based on impact and potential severity of a security related issue.
Participates in cyber investigations; analyzes data/evidence to identify potential cyber incidents and vulnerabilities.
Supports forensic research, as required to assess impact to corporate information assets. Provides insights into recommendations for corrective actions.
Monitors assigned aspects of Internet and intranet security and ensures ongoing effectiveness. Proactively assesses and makes recommendations for improvement.
Assist in the deployment, configuration, and maintenance of SDWAN solutions with preference for Fortinet. Responsibilities include monitoring SDWAN performance, troubleshooting connectivity and security issues, and collaborating with senior engineers to optimize network architecture.
Administer, configure, and optimize enterprise firewalls, with a strong preference for experience in Fortinet (FortiGate), Palo Alto Networks, and Checkpoint platforms. Responsibilities include advanced policy management, high-availability setup, firmware upgrades, and integration with SIEM and automation tools.
Implement and manage secure web gateway solutions, with a preference for Zscaler. Responsibilities include policy configuration, user authentication integration (e.g. SAML, AD), and troubleshooting web access and security incidents.
Deploy, configure, and maintain Web Application Firewall (WAF), with a preference for Akamai. Responsibilities include rule tuning, monitoring for application-layer threats, and collaborating with application teams to minimize false positives and optimize protection.
Assigns and coordinates external Internet domain names and identifiers used in network communication and assures their uniqueness.
Supports the resolution of all network security infrastructure related break/fix issues. Accurately interprets symptoms, identifies root cause and takes appropriate corrective action to resolve.