Network Security Engineer

Job Title: Network Security Engineer

Job Location : Somerset NJ 08873

Onsite Requirements:

• FortiGate, FortiManager, FortiAnalyzer
• Experience with Network Routing Equipment
• SDWAN

Job Description:

• The Network Security Engineer will report to the Director of Infrastructure and will support the design, implementation and maintenance of network solutions, tools, processes and policies especially as it pertains to overall security.
• Working within the framework of the security program for TAH, they will facilitate accurate documentation of the network environment, accurate reporting from the network devices and secure solutions to networking challenges posed through business activity.
• The person in this position will support the TAH organization by providing timely troubleshooting and remediation of network & security events, as well as getting involved in business unit projects to provide input on secure network design.

Job Details:

1. Supports the execution of the corporate security and communication initiatives
2. Ensures accurate documentation of corporate networking systems
3. Acts as primary network support in the event of security events or other major business-impacting incidents
4. Assists in technical projects in alignment with organizational goals where it pertains to networking and security
5. Evaluate and recommend necessary changes in performance tuning, infrastructure design and monitoring.
6. Serve as the highest level of in-house SME around networking and network security
7. Work with various TAH entities to analyze problems, evaluate solutions and help implement as needed
8. Contribute to the implementation of networking and security devices commensurate with corporate device lifecycle policies.
9. Contribute on organization-wide network and security-based application projects to ensure applications optimal performance and related infrastructure.
10. Involve actively in teams of cross functional project to assist solve problems inclusive of different technologies straddling multiple work groups.
11. Consult project engineers and managers to assure technology is suitably deployed and used to deliver applications along with technology solutions.

Position Requirements:

Knowledge, Skills and Abilities (KSAs)):

• Familiar with next generation firewall technology
• Experience with cloud (GCP, Azure) network and security is desirable
• Solid understanding of TCP/IP and network troubleshooting
• Excellent verbal and written communication skills
• Experience troubleshooting and responding to customer concerns
• Excellent analytical, interpersonal and communication skills with the ability to communicate complex technical issues in an easy-to-understand manner
• Resourceful, with the ability to work independently
• Strong time management skills and attention to detail
• Ability to multi-task activities with shifting priorities
• Ethical and trustworthy
• Incident Response experience related to network analysis

Background Experiences:

• A bachelor's degree in computer network related field, cyber security preferred or combination of equivalent experience
• Minimum 3 years' experience administering and maintaining Fortigate, FortiManager and FortiAnalyzer required
• 5 years of practical implementation and maintenance of network routing equipment
• 5 years of relevant professional network engineering or administration experience, with significant exposure to a variety of technologies and domains
• 3 years of advanced working knowledge of SDWAN and Network architecture.
• Experience patching and managing network configurations to include standard build installations and network system security hardening
• Experience with different routing protocols, OSPF, eBGP, iBGP
• Experience with the following technologies preferred:
• IDS, IPS, AV, Application, DNS security
• Network infrastructure (Cisco, Fortinet, etc.)
• Network admission control (NAC) (Aruba ClearPass, ForeScout, Cisco, etc.)
• Firewall management and auditing (FireMon, Tufin, AlgoSec, RedSeal, Skybox, etc.)
• Network packet brokers (Gigamon, IXIA, NetScout, etc.)
• SSL decryption (Blue Coat, F5, Gigamon, IXIA, etc.)
• Wi-Fi deployment and configuration (Cisco)
• public key infrastructure (PKI)
• Hardware security modules (HSM)
• Authentication solutions (RSA, Entrust, smartcard, biometrics, etc.)
• Log collection and aggregation (ArcSight, McAfee / Nitro, Splunk, IBM/QRadar, etc.)
• Network gear OS Hardening (Fortinet, Cisco.)

** 3rd party and subcontract staffing agencies are not eligible for partnership on this position. 3rd party subcontractors need not apply.

This position requires candidates to be eligible to work in the United States, directly for an employer, without sponsorship now or anytime in the future. **