Senior Network Security Engineer

Black & Veatch • Cary, NC

8d • Hybrid

About The Position

As an employee-owned company, our people are Black & Veatch. We put them at the center of everything we do and empower them to grow, explore new possibilities and use their diverse talents and perspectives to solve humanity's biggest challenges in an ever-evolving world. With over 100 years of innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a world of difference. Why Black and Veatch Black & Veatch allows you to lend your talent and perspective to humanity's biggest challenges in a flexible environment where you are empowered to grow and explore new possibilities. We offer competitive compensation; 401K match and benefits that start day 1.  Our hybrid environment allows you to balance your work and personal life. At Black & Veatch, you own your career with purpose and meaning. You are empowered to grow and explore new possibilities at every step of your career journey. Bring your big ideas knowing you are safe to be who you are and speak up with concerns or questions and put your diverse talents and perspectives to use.As the Sr. Network Security Engineer, you will have the opportunity to: Serve as a technical network security engineer, configuring, monitoring, and maintaining security standards on next-generation firewalls and security service edge solutions Ensure traffic is segmented, inspected, and managed per policy and business needs Be network security lead for offshore engineering staff in troubleshooting, daily tasks, and change oversight #LI-NK1 #LI-Hybrid The Team Black & Veatch's Business Enablement consists of critical groups that help enable the organizations people, projects, and businesses to be as successful as possible. Functions in this group include Digital & Information Technology, Global Finance, Global Human Resources, Legal, Risk Management, and Government Affairs and Real Estate and Building Services.

Requirements

• Bachelor's degree in information Security/Computer Science/Electronics and Engineering/Information Technology preferred or any other degree. Or, equivalent 8+years' experience or specialized training in lieu of degree.
• All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.

Nice To Haves

• Degree in Computer Science, Business Administration or related discipline
• 8+ years' hands-on experience working in heterogeneous TCP/IP intensive environments
• Strong understanding of security architecture & protocols, SASE/SSE solutions, VPNs, NAT, SSL/TLS, and IPSec
• Experience with network troubleshooting, capacity planning, performance tuning, firewall security design, and security best practices
• Demonstrate a high-level hands-on experience of working directly with each of the following:
• Palo Alto (plus Panorama/Prisma Access)
• Cisco Security (ASA, ISE, Firepower NGFW)
• Cisco Secure Client/AnyConnect
• Security Secure Edge (SSE) Solutions (Zscaler/Prisma Access/Cisco Secure Client)
• Network Monitoring and Management
• Demonstrate general hands-on experience working with each of the following:
• Network routing protocols (BGP/OSPF)
• Cisco Data Center Networking
• F5 Load Balancing
• High level of independent thinking and the ability to solve problems in a fast-paced environment
• Ability to engage in deep system level problem determination and resolution
• Must be able to work well within a technical team, as well as interface well with the outside business units Excellent organization skills, the ability to multi-task and prioritize various types of work and be able to meet/set deadlines for all assigned work
• Excellent interpersonal and communication skills (both written and verbal), able to relate with users, service providers, and management
• Ensures all solutions adhere to applicable change control requirements
• Must be able to respond to, and work on, after hours issues related to all technologies/protocols/solutions
• Self-motivated, proactive approach, able to work well independently in support of customer service level agreements
• Occasional travel will be required. Must be able to travel without restriction, when required
• Carries out duties in compliance with established business policies
• Responsible for exhibiting professional behavior with both internal/external business associates that reflects positively on the company and is consistent with the company's policies and practices
• Understands and is aware of the quality consequences which may result from the improper performance of their specific job. Has awareness of device defects that may occur in their area of responsibility, including product design, verification and validation, manufacturing and testing activities

Responsibilities

• Configure, administer, and maintain all network security hardware/software, monitoring tools, and security management portals
• Install, configure, and maintain complex multi-site VPN & TCP/IP networks
• Develop, recommend, and implement new and updated procedures together with key stakeholders to ensure an effective, streamlined, secure, and scalable operation and solution
• Maintain access to services such as applications, servers, routers, and related software and hardware via VPN
• Troubleshoot and resolve network performance problems
• Monitor and troubleshoot firewalls, logs, and connectivity issues
• Develop and support network automation and maintenance scripts
• Network firewall capacity planning
• Assists with the planning and implementation of the overall VoIP Connectivity solution.
• Proactively engages peers to understand key metrics for the business.
• Proactively researches and identifies new products and technologies that align with the strategic vision of the organization.
• Proactively seeks out educational opportunities to ensure long-term growth for this position.  Stay abreast of current and future industry trends related to network firewall technologies and application toolsets.

Benefits

• We offer competitive compensation; 401K match and benefits that start day 1.
• Our comprehensive benefits portfolio is a key component of this commitment and offers an array of health care benefits including but not limited to medical, dental and vision insurances along with disability and a robust wellness program.
• To support a healthy work-life balance, we offer flexible work schedules, paid vacation and holiday time, sick time, and dependent sick time.
• A variety of additional benefits are available to our professionals, including a company-matched 401k plan, adoption reimbursement, tuition reimbursement, vendor discounts, an employment referral program, AD&D insurance, pre-taxed accounts, voluntary legal plan and the B&V Credit Union. Professionals may also be eligible for a performance-based bonus program.
• We are proud to be a 100 percent ESOP-owned company. As employee-owners, our professionals are empowered to drive not only their personal growth, but the company's long-term achievements - and they share in the financial rewards of the success through stock ownership.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees