Lead Network Security Specialist Infrast

Iberdrola•Rochester, NY

9d•$106,000 - $132,500•Onsite

About The Position

Serves as a senior technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. Leads the engineering, installation, maintenance, and administration of technical aspects for the OSG Infrastructure team supporting Critical Infrastructure. Translates business requirements into secure network solutions or process designs.

Requirements

Associate degree in a technical-related field with 12 or more years of technical experience, bachelor's degree in a technical-related field with 8 or more years of technical experience, or master's degree in a technical-related field with 5 or more years of technical experience.
At least 10 years of experience working with infrastructure solutions in an enterprise environment.
Professional experience in more than one of the following areas: data center operations; disaster recovery/business continuity planning and execution; security and compliance management; infrastructure operational policies and procedures; or technical project coordination.
Operational experience configuring and maintaining enterprise Cisco routers, switches, and firewalls, such as Cisco Nexus 9K, Cisco Catalyst, Cisco ASR routers, Cisco 4K routers, Cisco ISE, Cisco Firepower, and Cisco ASA.
Operational experience configuring and maintaining next-generation firewalls such as Check Point and Palo Alto.
Expertise in network infrastructure, operations, and network security.
Proficiency in professional standards and trends within the area of expertise.
Proficiency deploying Check Point, Palo Alto, and Cisco ASA firewalls and implementing VPNs.
Knowledge of multiple security technologies, including network security, NAC, micro-segmentation, and network security architecture.
Experience implementing security technologies such as SAML and PKI infrastructure.
Experience with network access control systems in a large enterprise.
Experience with authentication systems such as RADIUS, TACACS+, SSO, and LDAP.
Experience planning, researching, and developing security policies, standards, and procedures.
Experience architecting in cloud environments such as AWS, Azure, and GCP.
Experience with SD-WAN and other tunneling and encryption transport technologies.
Experience with network security automation and DevOps.
Strong routing and switching experience, including BGP, OSPF, VPC, VXLAN, traffic engineering, and multicast.

Nice To Haves

Experience with packet capture software such as Wireshark, WinDump, or tcpdump.
Experience installing and configuring Citrix Netscalers in an enterprise high-availability environment.
Experience installing and configuring Cisco ISE in a distributed deployment with multiple personas.
Experience with Zero Trust Architecture.
Experience working in a regulated environment.
NERC/CIP experience.
Experience with Cisco Nexus Dashboard Fabric Controller (formerly DCNM).
Experience using the SolarWinds Orion platform suite of tools.

Responsibilities

Respond to assigned incidents, tasks, and requests within Service Level Agreements.
Work with internal clients, suppliers and contractors, project teams, and technical staff to identify, design, and support technical solutions.
Design, plan, and implement environmental changes for improvements or projects.
Maintain infrastructure technologies according to the change management process.
Lead technical implementation plans supporting infrastructure technologies.
Lead others in solving problems.
Lead contractors delivering services for projects or operational duties as needed.
Lead assigned functional teams or projects.
Lead the evaluation, selection, and testing of hardware and software products.
Maintain regulatory compliance under NERC/CIP guidelines.
Maintain high-quality security controls surrounding critical SCADA systems.
Perform or coordinate special assignments from OSG Infrastructure Management.
Provide 24x7 on-call support.
Provide professional and technical mentoring for team members.