Lead Network Security Specialist Infrast

Iberdrola•Rochester, NY

8d•Onsite

About The Position

Serves as a senior technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. Leads engineering, installation, maintenance, and administration of technical aspects for the OSG Infrastructure team supporting Critical Infrastructure. Translates business requirements into secure network solutions or process designs. The position is onsite in an office five days per week in Rochester, New York, and includes 24x7 on-call support. Employees may be assigned system emergency and NERC Reliability Standards compliance roles, with related responsibilities and requirements communicated by management.

Requirements

An associate-level technical degree and 12 or more years of technical experience, a bachelor's-level technical degree and 8 or more years of technical experience, or a master's-level technical degree and 5 or more years of technical experience.
At least 10 years of experience working with infrastructure solutions in an enterprise environment.
Professional experience in more than one of the following: data center operations; disaster recovery/business continuity planning and execution; security and compliance management; infrastructure operational policies and procedures; or technical project coordination.
Operational enterprise experience configuring and maintaining Cisco routers, switches, and firewalls, including Cisco Nexus 9K, Catalyst, ASR routers, 4K routers, ISE, Firepower, and ASA.
Operational enterprise experience configuring and maintaining next-generation firewalls such as Check Point and Palo Alto.
Expertise in network infrastructure, operations, and network security.
Proficiency in professional standards and trends within the area of expertise.
Proficiency deploying Check Point, Palo Alto, and Cisco ASA firewalls and implementing VPNs.
Knowledge of multiple security technologies, including network security, NAC, micro-segmentation, and network security architecture.
Experience implementing security technologies such as SAML and PKI infrastructure.
Experience with network access control systems in a large enterprise.
Experience with authentication systems such as RADIUS, TACACS+, SSO, and LDAP.
Experience planning, researching, and developing security policies, standards, and procedures.
Experience architecting in cloud environments such as AWS, Azure, and GCP.
Knowledge of SD-WAN and other tunneling/encryption transport technologies.
Knowledge of network security automation and DevOps.
Strong routing and switching experience, including BGP, OSPF, VPC, VXLAN, traffic engineering, and multicast.

Nice To Haves

Experience with packet-capture software such as Wireshark, WinDump, or tcpdump.
Experience installing and configuring Citrix NetScaler in an enterprise high-availability environment.
Experience installing and configuring Cisco ISE in a distributed deployment with multiple personas.
Experience with Zero Trust Architecture.
Experience working in a regulated environment.
NERC/CIP experience.
Experience with Cisco Nexus Dashboard Fabric Controller, formerly DCNM.
Experience using the SolarWinds Orion platform suite of tools.

Responsibilities

Respond promptly to assigned incidents, tasks, and requests to meet Service Level Agreements.
Work with internal clients, suppliers and contractors, project teams, and technical staff to identify, design, and support technical solutions.
Design, plan, and implement environmental changes for improvements or projects.
Maintain infrastructure technologies in accordance with the change management process.
Lead technical implementation plans supporting infrastructure technologies.
Lead others in solving problems.
Lead contractors delivering services for projects or operational duties as needed.
Lead assigned functional teams or projects.
Lead evaluation, selection, and testing of hardware and software products.
Maintain regulatory compliance under NERC/CIP guidelines.
Maintain high-quality security controls for critical SCADA systems.
Perform or coordinate special assignments from OSG Infrastructure Management.
Provide 24x7 on-call support.
Provide professional and technical mentoring for team members.