Sr. Network Security Engineer

………..Must Have's……..: (Make sure these are in the "company descriptions" on the resume, not just at the top under "Summary"

All of these are "must haves"…… please have this information in the candidates job descriptions, on the resume, so the hiring manager can see it….

Minimum 8+ years of experience ( Current ) as a senior Network Engineer with Cisco and Palo Alto systems designing, implementing, and maintaining enterprise-level LAN/WAN/WLAN networks.

Minimum 8 + years experience ( current ) with Advanced knowledge of Cisco ISE , and Network Access Control (NAC), and ( Endpoint Compliance , Policy enforcement , MAB )

6+ years ( Current ) Advanced knowledge of PAN NGFW , GlobalProtect VPN , routers, switches, and wireless .

Current Experience with Infoblox NIOS-based DNS/DHCP/IPAM implementations .

In-depth understanding of communication protocols (mainly TCP/IP ) and routing protocols (e.g., BGP, OSPF ) Advanced knowledge of Network routings and protocols (TCP/UDP, DHCP, DNS, etc.), attack vectors, techniques, and remediations.

Advanced knowledge of Cisco VSS , wireless, Palo Alto Networks firewalls , Global Protect VPN , Palo Alto Policy Based Routing , Segmentation , Cisco VRF , routing protocols

Experience with Spanning tree, implementations and troubleshooting

Strong experience establishing and maintaining a comprehensive security framework that includes network access controls . Experience Implementing a patching and security update program to ensure all network infrastructure equipment is up-to-date on software features and security updates

CCNP Certifications along with other Cisco and Palo Alto certs

Of course: Bachelor's Degree in IT, Engineering or related field

Logistics & Parameters:

Location: Oakland, CA -- Hybrid ( 2 days onsite to help at the data center in Oakland, CA must live near Oakland, Fremont or San Francisco, local candidates only! (live within 30-45 minutes from Oakland or Fremont, CA

Work authorization: Must have GC , GC EAD, or USC only for this Team

POSITION SUMMARY - Sr. Network Security Engineer, Oakland, CA

POSITION SUMMARY – Sr. Network Security Engineer

Support our data network and services, including security, LAN, WAN, and Wireless. The incumbent manages the operational reliability and performance of existing buildings, promptly resolving any network or security service interruptions that occur. As required by business changes, it extends and enhances the company network.

Required Qualifications

Advanced knowledge of CISCO ISE, PKI, and NAC.

Advanced knowledge of Network routings and protocols (TCP/UDP, DHCP, DNS, etc.), attack vectors, techniques, and remediations.

Advanced knowledge of Cisco VSS, wireless, Palo Alto Networks FW, Global Protect VPN, Palo Alto Policy Based Routing, Segmentation, Cisco VRF, routing protocols

Establish and maintain a comprehensive security framework that includes network access controls.

Implement a patching and security update program to ensure all network infrastructure equipment is up-to-date on software features and security updates

Has highly developed problem-solving skills to independently resolve issues using defined parameters and technical expertise.

Clearly understands the communications and network needs of the organization and has the skills needed to address those needs.

Demonstrated ability to analyze highly complex communication hardware and software systems for maintaining a real-time resource that impacts OP-wide network users.

Demonstrated ability to gather, organize, and analyze data in the completion of a variety of functional assignments.

Able to learn effectively and meet deadlines.

Demonstrated ability to communicate technical information to technical and non-technical personnel at various levels in the organization.

Self-motivated and works independently and as part of a team.

Ability to interpret cabling plans and oversee installers to ensure standards are met. Familiar with cabling and termination specifications, maintenance, and problem determination.

Ability to deploy and maintain Infoblox DDI

At least 8 years of experience designing, implementing, and maintaining an enterprise networks.

May require travel outside of regular business hours.

Participate in 24/7 on-call support rotation.

Top Qualifications

Advanced knowledge of Cisco ISE, and Network Access Control (Endpoint Compliance, Policy enforcement, MAB)

Advanced knowledge of PAN NGFW, GlobalProtect VPN, routers, switches, and wireless.

Familiarity with Infoblox NIOS-based DNS/DHCP/IPAM implementations.

In-depth understanding of communication protocols (mainly TCP/IP) and routing protocols (e.g., BGP, OSPF)

Ability to plan, configure, and install Citrix NetScaler/ADC load balancing, redirect, and content switching configurations.

Education

Bachelor's degree in a related area and/or equivalent experience/training.