Firewall and Network Engineer

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
The role will include project implementation transition and BAU support across several client environments and all associated documentation and business controls associated with the devices under management.

As a member of a team or working independently the role will be required to perform an analytical and technical role in implementation integration and delivery of technical IT security solutions for clients. This includes the use of inter-operational processes and procedures. The role requires the ability to troubleshoot technical issues in various platforms evaluate customer network/infrastructure and recommend best practices for application availability and network security provide technical and procedural guidance to customers in a timely fashion log all cases into the ticketing system and maintain ownership of issues and follow through for all customers until issues are properly closed.

A Firewall and Network Engineer should have an excellent problem-solving skills and will need to have an in-depth knowledge of TCP/IP network routing & switching protocols hands-on experience and strong understanding and competency in one or more best-of-breed Firewall IPS/IDS /security products from various vendors such as Check Point Cisco Palo Alto. Working familiarity with Unix Linux Windows OS and scripting language to automate tasks is a plus. The role will also require an excellent written and oral communication skills good attention to details strong organization.

Your roles & responsibilities:

• BAU (ongoing) support of firewall & IPS infrastructure including changes service request & incident response problem determination/resolution achieving SLA targets change/problem management.
• Assisting with Implementation of new firewalls Cisco Checkpoint Palo Alto and others.
• Problem determination associated with new project installs.
• Working with Design/project teams to ensure that proposed solutions are accurate and achievable.
• Management of problems and escalations where required.
• High awareness of individual customer service levels when dealing with problems.
• Callout services to third parties as required – Hardware Vendors etc.
• Develop implement and maintain processes and procedures as required for the team.
• Maintaining a high level of communication with the team.
• Adhere to audit compliances strategies to ensure security and business processes as part of BAU.

Required Technical and Professional Expertise

• Diploma in Information Technology or equivalent work experience
• Professional Certifications like Network+ Security+ CCNA CCSA JNCIA BCCPA CISSP CEH and GCIA
• 3 year experience in general Information Security practices
• 3 years of experience in TCP/IP networking and routing fundamentals
• 2 year experience in Unix/Linux system administration
• 3 year experience in firewall / security gateway administration
• 3 year experience in network troubleshooting
• 3 year experience in Intrusion Detection/Prevention
• Additional knowledge and understanding of one or more of the following concepts and technologies a plus
  – 1 year Network based proxy concepts and technologies
  – 1 year Content Filtering concepts and technologies
  – 1 year Vulnerability scanning concepts and technologies
  – 1 year SIEM concepts and technologies
  – 1 year Email and Web security concepts and technologies
• An experienced background in WAN LAN TCP/IP and Networking
• Firewall administration configuration and implementation – Cisco Firepower / Checkpoint / Palo Alto
• Ability to learn to administer security products if required
• Understanding and application Firewall/VPN rules and routes
• Understanding of corporate network environments ability to troubleshoot network connectivity problems based on detailed design diagrams / MDL
• Analytical ability and creativity in resolving design and production issues
• Appropriate skill level for Windows & Active Directory Linux/Unix systems
• Perform daily checklist and health check submitting compliance / activity / throughput reports.
• Knowledge and application of Problem and Change management process.

Preferred Technical and Professional Expertise

• Bachelor’s Degree in Information Technology Computer Science Engineering or equivalent degree or equivalent work experience
• At least 5 years of experience in Network Troubleshooting
• At least 5 years of experience in Intrusion Detection/Prevention
• At least 5 years of experience in Operating System Skills
• At least 3 years of experience with Unix/Linux system admin level knowledge
• At least 5 years of experience in Customer Service
• Experience in a large-scale implementation
• Proven level 1 & 2 support skills in Firewall / IPS support
• Excellent problem determination skills especially with experience in working with 3rd parties
• Multiple Firewall & IPS systems configuration & updating – Cisco Check Point Palo Alto
• Some experience with Juniper Checkpoint or CISCO implementation/support.
• ServiceNow Incident and Change management
• Data exporting & reporting automation
• Experience with web content gateways Forcepoint Web/Email Security FireEye Proofpoint ProxySG etc.
• Demonstrated ability to work under pressure.
• Cloud skills- AWS /Azure