Sr. Network Security Engineer - UCOP (University of California)

Sr. Network Security EngineerInterview: Virtual (Read JD properly first) Visa: GC, GC EAD, or USC Hybrid: Oakland, CA -- Hybrid (2 days onsite to help at the data center in Oakland, CA must live near Oakland, Fremont or San Francisco, local candidates only! (live within 30-45 minutes from Oakland or Fremont, CA (Cisco Client, Palo Alto, Network Access Control (NAC), Infoblox)Looking for top tier communication skills – reliable, honest and trust-worthy candidates.Must Have's: (Make sure these are in the "company descriptions" on the resume, not just at the top under "Summary"):Minimum 8+ years of experience (current) as a senior Network Engineer with Cisco and Palo Alto systems designing, implementing, and maintaining enterprise-level LAN/WAN/WLAN networks.Minimum 8+ years experience (current) with advanced knowledge of Cisco Client, and Network Access Control (NAC), and (Endpoint Compliance, Policy enforcement, MAB)6+ years (current) advanced knowledge of PAN NGFW, GlobalProtect VPN, routers, switches, and wireless.Current experience with Infoblox NIOS-based DNS/DHCP/IPAM implementations.In-depth understanding of communication protocols (mainly TCP/IP) and routing protocols (e.g., BGP, OSPF)Advanced knowledge of Network routings and protocols (TCP/UDP, DHCP, DNS, etc.), attack vectors, techniques, and remediations.Advanced knowledge of Cisco VSS, wireless, Palo Alto Networks firewalls, Global Protect VPN, Palo Alto Policy Based Routing, Segmentation, Cisco VRF, routing protocolsExperience with Spanning tree, implementations and troubleshootingStrong experience establishing and maintaining a comprehensive security framework that includes network access controls.

Experience implementing a patching and security update program to ensure all network infrastructure equipment is up-to-date on software features and security updatesCCNP Certifications along with other Cisco and Palo Alto certsOf course: Bachelor's Degree in IT, Engineering or related fieldJD: DEPARTMENT OVERVIEW As a security-first organization, Technology Delivery Services (TDS) is part of the Information Technology (IT) Department. The TDS teams include Information Security, Planning (architecture and PMO), Application Development, HR and Payroll Development, Infrastructure, and Client Services. We maintain an innovative, inclusive, and supportive work environment.POSITION SUMMARY – Sr. Network Security Engineer Support our data network and services, including security, LAN, WAN, and Wireless. The incumbent manages the operational reliability and performance of existing buildings, promptly resolving any network or security service interruptions that occur. As required by business changes, it extends and enhances the company network.Required QualificationsAdvanced knowledge of CISCO Client, PKI, and NAC.Advanced knowledge of Network routings and protocols (TCP/UDP, DHCP, DNS, etc.), attack vectors, techniques, and remediations.Advanced knowledge of Cisco VSS, wireless, Palo Alto Networks FW, Global Protect VPN, Palo Alto Policy Based Routing, Segmentation, Cisco VRF, routing protocolsEstablish and maintain a comprehensive security framework that includes network access controls.Implement a patching and security update program to ensure all network infrastructure equipment is up-to-date on software features and security updatesHas highly developed problem-solving skills to independently resolve issues using defined parameters and technical expertise.Clearly understands the communications and network needs of the organization and has the skills needed to address those needs.Demonstrated ability to analyze highly complex communication hardware and software systems for maintaining a real-time resource that impacts OP-wide network users.Demonstrated ability to gather, organize, and analyze data in the completion of a variety of functional assignments.Able to learn effectively and meet deadlines.Demonstrated ability to communicate technical information to technical and non-technical personnel at various levels in the organization.Self-motivated and works independently and as part of a team.Ability to interpret cabling plans and oversee installers to ensure standards are met. Familiar with cabling and termination specifications, maintenance, and problem determination.Ability to deploy and maintain Infoblox DDIAt least 8 years of experience designing, implementing, and maintaining an enterprise networks.May require travel outside of regular business hours.Participate in 24/7 on-call support rotation.Top QualificationsAdvanced knowledge of Cisco Client, and Network Access Control (Endpoint Compliance, Policy enforcement, MAB)Advanced knowledge of PAN NGFW, GlobalProtect VPN, routers, switches, and wireless.Familiarity with Infoblox NIOS-based DNS/DHCP/IPAM implementations.In-depth understanding of communication protocols (mainly TCP/IP) and routing protocols (e.g., BGP, OSPF)Ability to plan, configure, and install Citrix NetScaler/Client load balancing, redirect, and content switching configurations.EducationBachelor's degree in a related area and/or equivalent experience/training.