Lead Network Security Specialist Infrastructure

Iberdrola•Kirkwood, NY

4d•Onsite

About The Position

Serves as senior technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. Leads the engineering, installation, maintenance and administration of technical aspects for the OSG Infrastructure team supporting Critical Infrastructure. Responsible for translating business requirements into secure network solutions or process designs.

Requirements

MS Technical Related Degree with 5+ years’ technical experience; OR BS Technical Related Degree with 8+ years’ technical experience; OR AS Technical Related Degree with 12+ years’ technical experience
Position requires a minimum of ten (10) years’ experience working with infrastructure solutions in an enterprise environment
Position requires professional experience with more than one of the following areas: Data Center Operations, Disaster Recover/Business Continuity Planning & Execution, Security & Compliance Management, Infrastructure Operational Policies & Procedures, and/or Technical Project Coordination
Position requires Operational experience in an Enterprise Environment configuring and maintaining Cisco Routers/Switches/Firewalls such as Cisco Nexus 9K, Cisco Catalyst, Cisco ASR Routers, Cisco 4K Routers, Cisco ISE, Cisco Firepower, Cisco ASA
Position requires Operational experience in an Enterprise Environment configuring and maintaining Next generation firewalls such as Checkpoint and Palo Alto
Expert within network infrastructure, operations & network security
Proficient in professional standards and trends within area of expertise
Proficient in deploying Checkpoint, Palo Alto, Cisco ASA firewalls along with implementing VPN’s
Knowledge of multiple security technologies, to include network security, NAC, Micro segmentation, network security architecture
Implementing security technologies such as SAML and PKI Infrastructure
Network Access Control systems in a large enterprise
Experience with authentication systems such as RADIUS, TACACS+, SSO, LDAP
Experience planning, researching, and developing security policies, standards, and procedures
Experience with architecting in cloud environments (AWS, Azure, and GCP)
SD-WAN and other tunneling\encryption transport technologies
Network Security Automation and DevOps
Strong Routing and Switching experience (BGP, OSPF, VPC, VXLAN, vain traffic engineering, Multicast, etc.

Nice To Haves

Experience with packet capture software such as Wireshark, WinDump, tcpdump, etc.
Experience with installing and configuring Citrix Netscalers in an Enterprise High Availability environment
Experience with installing and configuring Cisco ISE in a distributed deployment with multiple personas
Experience with Zero Trust Architecture
Experience working in a regulated environment
NERC/CIP experience a plus
Experience with Cisco Nexus Dashboard Fabric Controller (Formerly DCNM)
Experience using Solarwinds Orion platform suite of tools

Responsibilities

Provide timely responses to all incidents, tasks and requests assigned to meet Service Level Agreements.
Work with internal clients, suppliers/contractors, project teams and other technical staff to identify, design and support technical solutions.
Design, plan and implement changes to the environment for improvements or projects
Provide maintenance of infrastructure technologies following the change management process
Lead the technical implementation plans in support of infrastructure technologies
Leads others to solve problems
Leads contractors to deliver services to projects and or operational duties as needed
Leads functional teams or projects as assigned
Lead the evaluation, selection, and testing of hardware and software products
Maintain regulatory compliance under NERC/CIP guidelines
Maintain high quality security controls surrounding the critical SCADA systems
Perform/coordinate special assignments from OSG Infrastructure Management
Provide 24x7 on call support
Provide professional and technical mentoring for team members