Network Security Engineer

As a Network Security Engineer, you will be working under the direction of the Lead Network Security Architect to implement and support a wide variety of network and security technologies.  This will include participating in the design, deployment, configuration and troubleshooting of Network Security technologies such as Firewalls, IPS/IDS, NAC solutions and more. 

RESPONSIBILITIES 

• Configure and implement network & security solutions for GHS clients 
• Working with key Support and Technology vendors, define Enterprise Hardware & Software standards for LAN / WAN infrastructure technologies and Firewalls, Web Content Filters, IPS, VPN, etc 
• Perform infrastructure Configure and implement network & security solutions for Glasshouse Systems clients 
• Working w maintenance and upgrades to client environments 
• Provide technical guidance and recommendations for client-driven initiatives and strategies 
• Perform technical assessments using industry standard toolsets for network, and security architectures 
• Creating standardized operating procedures and assisting with post implementation support after successful delivery of the new solution 
• Documenting and maintaining network diagrams and configuration changes 
• Install, configure, and manage firewalls (Palo alto, Cisco Firepower) 
• Maintain security solutions, including firewall policies and VPN configurations, performing security administration functions for user access and remote access 
• Establish and troubleshoot IPSEC tunnels with customers. 
• Manage and monitor the intrusion prevention system 
• Perform problem determination and root cause analysis, effectively working with vendors and carriers as required 
• Provide technical support to internal and external clients, including problem determination, resolution, and escalation as needed 
• Participate in the on-call rotation and be able to respond to critical or high severity alerts after hours and follow documented steps to address such issues 
• Participate with on demand after hours change implementation for new initiatives and or in support of incident management 
• REQUIREMENTS 
• Bachelor's degree in computer networking or computer science is preferred 
• Certifications - PCNSE, CCNP 
• Minimum 5+ years of working in a Network, with high level experience with Firewall environments, IDS/IPS, SD-WAN, VPN, Firewalls, etc  
• Experience with technologies such as: Cisco / Fortinet / Palo alto (Palo Alto Threat Protection, Cisco Firepower Threat defense, IPS/IDS, HSRP/VRRP, VRF, VPC, VC, LACP, Fabric Path etc) 
• Extensive support of Routing Protocols/Technologies such BGP, OSPF, MPLS VPN, Multicast 
• Ability to perform TCP/IP Network traces/packet captures with solid experience interpreting results 
• Ability to analyze packet captures using Wireshark and other related technologies 
• Perform or participate in complex maintenance or deployment activities 
• Develops and maintains standard operating procedure manual and processes used by the team 
• Experience with Palo Alto firewalls, App-ID, user-ID, content-ID and Global Protect 
• In-depth understanding on IPsec VPNs, Global Protect VPNs, Security Profiles, Firewall implementation 
• Broad knowledge of security & network solutions, security monitoring, event analysis, threat hunting and countermeasures 
• Experience in BGP/OSPF and EIGRP routing protocol design, configuration, and troubleshooting 
• Experience of working in a multi-cultural, virtual team, across multiple geographical regions 
• Some travel is required for this position 

Nice to have

• Experience in IT and Data Centre infrastructure strategies, solutions, and concepts 
• Knowledge of Virtualization techniques (VMWare, Hyper-V)  
• Experience applying ITIL best practices is an asset  
• Experience in ITSM ticketing tool – Service Now 

PERSONAL ATTRIBUTES 

• Excellent verbal and written communications skills 
• In addition to network and security expertise, we expect the engineer to have a  
• Strong team player and enjoys working in a fast-paced team atmosphere 
• Ability to manage priorities, commitments and projects 
• Must be able to grasp highly technical concepts quickly 
• Passionate about cybersecurity concepts and technologies