Network Security Engineer

NNGE•Flagstaff, AZ

14d•Onsite

About The Position

The Network Security Engineer plans, coordinates, documents, and implements information security measures to protect computer files and systems from accidental or unauthorized modification, destruction, or disclosure. The role develops and maintains security methodologies, frameworks, policies, procedures, and awareness programs; monitors compliance; and advises process owners and end users on security requirements for applications, workstations, servers, networks, and internet, intranet, and extranet services. The engineer coordinates security software updates, reviews security provisions in purchased software, maintains user security-level records, monitors critical business application security, and conducts risk analyses of sensitive application systems at least annually or sooner when significant changes occur. The position also verifies contractor compliance, ensures compliance with commercial software licensing requirements, maintains confidentiality, and stays current on security technologies and practices. Work is generally office-based, with occasional casino-setting work, possible travel, and potential extended hours or irregular shifts.

Requirements

Bachelor’s degree in Computer Science or a related field.
Five years of work experience in Data Security Administration, Data Security Analysis, or a similar position.
Valid CISSP or CCNP Security certification.
Valid driver’s license and clean driving record.
Meet all stated knowledge, skills, and abilities.
No felony, theft, or stealing convictions.
Successfully pass a pre-employment drug/alcohol screen and background investigation.
Obtain and maintain a gaming license.
Knowledge of security concepts, practices, and procedures, including network and project management.
Knowledge of Cisco configurations and experience with Cisco routers.
Knowledge and progressive experience with Windows 2003/2008/2012, Active Directory domains, and Exchange.
Knowledge of TACACS+, RADIUS, and Cisco Access Control Systems.
Knowledge of 802.1x, WPA2 Enterprise, authentication and access controls in a mobile environment, and mobile device security.
Knowledge and experience with Cisco firewalls.
Knowledge of server operating systems and types of network equipment.
Knowledge of WAN/LAN design.
Skill with Microsoft Office applications, WAN, LAN, voice communications, and Windows and Unix operating systems.
Ability to identify systems, operational, technical, or application problems and initiate and recommend appropriate corrective actions.
Ability to communicate effectively verbally and in writing.
Ability to interact and maintain good working relationships with individuals of varying social and cultural backgrounds.
Ability to maintain confidentiality.
Ability to analyze situations and adopt appropriate courses of action.
Ability to establish and maintain professional relationships with coworkers at all levels.
Ability to work independently and meet strict timelines.
Ability to make sound decisions and exercise independent judgment.

Nice To Haves

Navajo preference.
Industry certifications such as MCP, MCSA, MCSE, VMware, CompTIA, CISSP, LPI, or Cisco.

Responsibilities

Plan corporate information services infrastructure and establish, enforce, and document data security methodologies and frameworks.
Plan, coordinate, document, and implement information security measures to protect computer files from accidental or unauthorized modification, destruction, or disclosure.
Review employee violations of computer security procedures, enforce policy, and ensure security policies are implemented during disasters or emergencies.
Recommend new or modified security procedures in response to changes in the business environment.
Coordinate implementation of vendor-issued security software updates.
Promote and maintain a practical data security awareness program.
Develop and write computer security department policies and procedures.
Advise process owners and end users on security requirements for applications, workstations, distributed computing applications, servers, networks, and internet, intranet, and extranet services.
Review security provisions in purchased software.
Maintain a comprehensive list of user security levels for applications and related systems, including hardware, software, communications, personnel, and data security as needed.
Monitor and ensure security requirements for critical business application systems.
Advise application users about security available through application systems and network file sharing.
Ensure compliance with legal requirements for commercial proprietary software, including copyrights and site licenses.
Conduct risk analyses of sensitive application systems at least annually or when significant changes are made, whichever is sooner.
Verify that external contractors comply with security requirements.
Stay current on technologies and principles through research, professional publications, seminars, educational workshops, classes, conferences, professional networks, societies, and consultation with related organizations.
Maintain confidentiality of privileged information.
Perform other duties as required.