Senior Network Security Engineer-W2-GC-USCJob Location: Hybrid. Located in one of our hub cities, with preference for CST – 10% onsite on need basis only. Hub cities are: Dallas, Atlanta, New York City, San Francisco, or Chicago. This role will be expected to travel as necessary to support customer activities, though travel should be minimal.Duration: 6 Months - Right to HireOverview:Primary Responsibilities will include:Design and engineering of effective and scalable network systems and solutionsParticipate in evaluation, testing, selection, and deployment of foundational network elements for a network buildoutEnsure that solutions adhere to defined standards and best practices and/or assist in the development of these standards and best practices.Effectively design and communicate engineering solutions through detailed high- and low-level diagramsRoutinely research, analyze, test, retest, and troubleshoot complex problemsAble to work in a fast-paced environment, with strict deadlines, both as an individual contributor and team leaderProven experience in knowledge transfer, documentation and information sharing while staying abreast of new technology/technical areasProvide advanced technical experience for complex project work, including functional subsystem upgrades for mission-critical network devices and services as well as strategic upgrades to the networkDesign, plan, and implement complex networksEstablish requirements, provide analysis for network and services specifications, network design, network partitioning, and network architecture definitionProvide advanced expertise in the development of network test, validation, and integration plans on projects, and assurance of network integrityEngage with Solutioning and Sales teams as a subject matter expert during customer callsAbility to mentor junior engineers in advanced technology deploymentsTime management and the ability to multitask between several ongoing projectsAssist with development of SoW and LoE documentationEducation and Experience:10+ years of professional experience in large enterprise or carrier spaceProfessional networking certifications a plus (i.e. CCNP/CCIE or equivalent)Public cloud certifications a plus - Advanced Networking, Cloud Network Engineer, or equivalentMust haves: Cisco ISE Experience with Wired / Wireless Deployments of wired 802.1x roll outs, TACACS+, upgrades of ISE deployments, and migrations of ISE.
Experience with SDA, Trustsec, guest portal and other portal flows. Palo Alto experience with Panorama and Palo Alto firewalls.
Experience with migrations, upgrades, troubleshooting, and other efforts with Palo Alto firewalls and with Panorama. Site to site tunnel configuration, Security / NAT configuration, Global protect Configuration and MFA. Cisco Secure Firewall (FTD) and ASA experience.
Experience configuring and deploying FMC's virtually and physically. Site-to-site VPN, Remote Access VPN, and experience configuring Firepowers as both FTD's associated with FMC and also with FDM.
Experience with Cloud delivered FMC is a plus.
Experience with managing projects to include task delegations, documentation, risk management, and technical ownership.