Network Security Lead

Black & Veatch Family of Companies•Cary, NC

10d•Hybrid

About The Position

The Network Security Lead serves as a technical network security lead engineer, configuring, monitoring, and maintaining security standards across network access control (NAC) and identity access management (IAM) systems, secure access service edge (SASE) solutions, and next-generation firewalls. The role ensures network traffic is secure, segmented, inspected, and managed in accordance with policy and business needs, and provides technical leadership to onshore and offshore engineering staff on troubleshooting, daily work, and change oversight. The position is part of Black & Veatch’s Business Enablement organization, which supports the company’s people, projects, and businesses. The role is responsible for network security systems and operations, VPN and TCP/IP networks, connectivity, performance, automation, capacity planning, and support for VoIP connectivity. It also involves engaging with peers and stakeholders, identifying technologies aligned with organizational strategy, and keeping current with network firewall industry trends. The position is full-time. Occasional travel is required, and the employee must be able to travel without restriction when required. Hybrid or flexible work options may be offered after the first 90 days, at the manager’s discretion and based on performance and assignments. After-hours response and work on issues related to the supported technologies may be required.

Requirements

At least 8 years of hands-on experience in heterogeneous TCP/IP-intensive environments, or equivalent experience or specialized training in lieu of a degree.
Bachelor’s degree in information security, computer science, electronics and engineering, information technology, or another discipline; the posting also allows equivalent experience or specialized training in lieu of a degree.
Strong understanding of security architecture and protocols, SASE/SSE solutions, VPNs, NAT, SSL/TLS, and IPSec.
Experience with network troubleshooting, capacity planning, performance tuning, firewall security design, and security best practices.
Hands-on experience with Palo Alto Panorama/Prisma Access, Cisco Security ISE and ASA, Cisco Secure Client/AnyConnect, SSE solutions such as Zscaler/Prisma Access/Cisco Secure Client, and network monitoring and management.
General hands-on experience with network routing protocols such as BGP/OSPF, Cisco data center networking, and F5 load balancing.
Independent problem-solving ability in a fast-paced environment, including deep system-level problem determination and resolution.
Ability to work effectively within a technical team and interface with outside business units.
Strong organization, multitasking, prioritization, and deadline-management skills.
Excellent written and verbal communication and interpersonal skills when working with users, service providers, and management.
Self-motivated and proactive, able to work independently in support of customer service-level agreements.
Able to work after hours when required and travel without restriction when required.
Occasional travel is required.
Must complete applicable pre-employment onboarding requirements, which may include criminal/civil background checks, drug screening, and motor vehicle records searches.

Nice To Haves

Degree in computer science, business administration, or a related discipline, or equivalent work experience.
Bachelor’s degree in information security, computer science, electronics and engineering, or information technology is preferred.

Responsibilities

Configure, administer, and maintain network security hardware and software, monitoring tools, and security management portals.
Install, configure, and maintain complex multi-site VPN and TCP/IP networks.
Develop, recommend, and implement procedures with key stakeholders to support effective, streamlined, secure, and scalable operations and solutions.
Maintain VPN access to services, including applications, servers, routers, and related software and hardware.
Troubleshoot and resolve network performance problems.
Monitor and troubleshoot firewalls, logs, and connectivity issues.
Develop and support network automation and maintenance scripts.
Plan network firewall capacity.
Assist with planning and implementing the overall VoIP connectivity solution.
Engage proactively with peers to understand key business metrics.
Research and identify products and technologies aligned with the organization’s strategic vision.
Pursue educational opportunities and keep abreast of current and future trends in network firewall technologies and application toolsets.
Provide technical leadership to onshore and offshore engineering staff on troubleshooting, daily tasks, and change oversight.
Ensure solutions adhere to applicable change control requirements.
Respond to and work on after-hours issues related to supported technologies, protocols, and solutions.
Carry out duties in compliance with established business policies and exhibit professional behavior with internal and external business associates.