Network Security Engineer IV

InComm Payments•Atlanta, GA

13d•Hybrid

About The Position

We are actively seeking a Senior Network Security Engineer with strong Palo Alto Networks firewall management experience. This is a great opportunity for someone who excels at working independently, while still being an active contributor to InComm’s Network Security Engineering team. We need a critical thinker and someone who is passionate about network security and has an interest in coaching and mentoring others. Ability to travel to Atlanta-area data centers is required. Our Network Engineering & Architecture team is responsible for owning the tools that other operations teams use within InComm Payments’ network and is also responsible for the devices that sit on the edge of the network. As the Senior Network Security Engineer, you will be responsible for implementing, maintaining, and improving solutions for the InComm Firewall Security program. This position must be well-versed in understanding the IT landscape including security, infrastructure, network, client, server, emerging technology standards and trends and will be involved in strategy, design, and engineering to contribute to the development of protection and secure solutions.

Requirements

8+ years IT experience.
4+ years Information Security experience.
Experience with operations and management of complex enterprise-architected systems on multiple platforms, applications, operating systems, and infrastructure.
Experience designing, implementing, and managing secure network architecture.
Experience researching, recommending, and implementing changes in security technology and processes in accordance with leading practices and business-related goals.
Experience managing, monitoring, and auditing firewall rules and systems.
Experience partnering with other leaders and business project sponsors to build consensus on project requirements, expected timelines, and service delivery goals and report on status and key project risks.
Ability to think with a security mindset while successfully analyzing and reducing business risk during remediation efforts.
Ability to communicate security and data governance related concepts to a broad range of technical and non-technical staff both verbally and in writing.
Ability to stay current with new technology.
Ability to work productively while remote and communicate effectively in a virtual team environment.
Ability to travel independently to data centers and perform security appliance installations and troubleshooting.
Familiarity with Radware Anti-DDoS mitigation experience is a plus.

Nice To Haves

Cisco firewall experience is a plus.
Anti-DDoS mitigation experience a plus. (Radware, Netscout)
Familiarity with Radware Anti-DDoS mitigation experience is a plus.

Responsibilities

Strong experience in Palo Alto Expedition and Panorama.
Strong analytical skills.
Extensive knowledge of network routing, services, and security protocols: TCP/IP, SSL, TLS, SSH, IPSEC VPN, SSL VPN, VLAN, WLAN, VOIP, QOS
Possess working knowledge of security solutions and technologies: Palo Alto Firewalls mandatory, Cisco firewall experience is a plus. Intrusion detection / prevention systems (IDPS), Network Access Control (NAC), Identity Services Engine (ISE), Full packet capture and network traffic monitoring solutions. Anti-DDoS mitigation experience a plus. (Radware, Netscout)
Think with a security mindset while successfully analyzing business risk and remediation effort, to prioritize efforts and projects and not impact productivity.
Partner with other leaders and business project sponsors to build consensus on project requirements, expected timelines, and service delivery goals as well as report on status and key project risks.
Communicate highly technical content to various audiences ranging from client engineers to executive management, including mixed audiences.
Specify security requirements and maintain operation of security systems.
Will be required to participate in technical on call rotation for escalation final technical tier troubleshooting.
Research, recommend and implement changes in security technology and processes in accordance with leading practices and business-related goals.
Compliance mindset needed to navigate PCI-DSS, SOC, HIPPA network and security requirements.