Staff Network Security Engineer Jobs

Demonstrate advanced understanding of business processes, internal control risk management, IT controls and related standards.

Conduct POCs of new Access Management products and services to validate integration needs.

Provide Subject Matter Expertise for requirements consulting and advise on the appropriate options on Okta/Auth0 platform.

Manages all aspects of large, globally distributed, and complex CIAM projects.

10+ years of experience in designing, implementing, and supporting SSO and IAM solutions.

7+ years of hands-on experience in the implementation and support of Identity & Federation services (preferably Auth0)

Manage connectivity issues, maintain vendor relationships and assist with vendor escalation and issue resolution

Gather requirements and apply product upgrades as appropriate

Facilitate device refresh of network security devices with a focus on capacity, manageability, and security of new and existing security infrastructure

Knowledge of Windows & Linux operating systems

Experience with one or more firewall technologies such as Check Point (preferred), Palo Alto, Cisco, Fortinet, etc

Experience with Zscaler is a plus

Expertise in Configuring and Managing Network Management Tools like Logic Monitor, Enigma

Hands on Experience on Citrix ADC, F5 and App Director Load Balancer.

Expertise Configuring and Troubleshooting Site to Site and remote access VPN over routers and firewalls.

Candidate must be holding Palo Alto certification.

Location Preference: Boston/Quincy – MA or Princeton – NJ or Remote

Expertise in Configuring and Managing & Troubleshooting for Palo Alto Firewall’s, Cisco ASA, Checkpoint.

Strong self-starting and time-management skills

Professional experience securing networks, IT infrastructure, applications, endpoints, and/or APIs

Experience hardening Windows, MacOS, and/or Linux operating systems

Excellent communication skills, both written and verbal

Work with other Starlink teams to determine functional needs, develop secure architectures, and communicate security best practices and policies

Support the development and implementation of network security tools

At least 5 years of firewall management experience

Remote Access Services and extranet experience

Understanding DNS/DCHP/IP address management systems

3-5+ years of experience in network security

Skilled understanding of network routing protocols

Strong network and routing knowledge including BGP

Knowledge of audit concepts and regulatory requirements.

Experience with managing Zscaler Web Proxy or other platforms.

Experience with managing Microsoft e-mail platform from a security prospect.

Requires continuous self-reflection and learning of soft/technical skills to accommodate constantly changing e-business and cybersecurity landscape.

Experience with Data Protection platforms for data loss prevention.

Knowledge of defense in depth, security best practice, security controls, networking concepts, emerging technologies, attack methods, and mitigation techniques.

Experience working on application security vulnerabilities remediation for .NET & Java stack

Technical security certifications (e.g. Systems Security Certified Practitioner) strongly preferred

Experience using static scan tools and dynamic scan tools like Checkmarx, Prisma, or Qualys

Good experience and understanding of security best practices in every step of the software development lifecycle (SDLC)

Experience adhering to secure coding principles and aiding in coding/testing applications against security risks/parameters before release

Knowledge of using app security scan tools and understanding of remediation steps

Experience driving projects with minimal supervision, goal driven individual with good technical, interpersonal, communication, and organizational skills

Identify, educate, and remediate vulnerabilities in code using SAST/DAST/SCA

Experience fully owning epics with decreasing guidance

Experience operating in a Lead Engineer capacity for medium to large initiatives, prioritizing and assigning tasks, providing guidance, and resolving issues.

Serve as a subject matter expert for Application Security, providing guidance to Engineering and Product teams

Responsible for adhering to secure coding principles and aid in testing the application against security risk/parameters before release

Bachelor’s degree in computer science with 2 years of experience or equivalent relevant academic qualifications.

The candidate should handle any high severity situation related to client environment. The candidate should have good and problem analytical skills.

It is not only security, all the datacenter/enterprise and retail network environment which contains below mentioned technologies.

Juniper SRX and Palo Alto firewalls

Cisco nexus (7k, 5k, 2k) series

Solid understanding and exposure to F5 load balancing tool is must

Strong communication, documentation, and time management skills.

Serve as a key team member using existing technical knowledge and have the skills to perform specific projects independently.

Interact with other engineers and management to identify areas of improvement for operational efficiency.

Comply with Incident Management and Change Management procedures and reporting practices.

Experience configuring and troubleshooting Fortinet platforms such as Fortimanager, Fortigate, FortiSandbox, Fortianalyzer and Fortiauthenticator.

Experience using Scrutinizer to manage network devices and troubleshoot.

Conducts threat and vulnerability risk assessments to determine security requirements and proactively fix security flaws and vulnerabilities.

Regular contact with internal and external customers and contractor representatives involved with LAN/WAN design, network implementation, and network management.

Conducts analysis of security requirements and controls to identify gaps and provides recommendations of industry best practices, trends, and technology products.

Implements, manages, and enforces electronic information security directives in compliance with the Health Insurance Portability and Accountability Act (HIPAA).

At least one professional information security certification required (CCNA-Security, CISSP, CISM,CRISC, and/or SANS GIAC).

Professional certifications; CISSP, CISM, & CCNP.

Strong leadership skills and the ability to mentor and manage a team of engineers.

Ensure that Security and IT systems meet security, compliance, and performance requirements.

Conduct security assessments and vulnerability testing to identify potential security risks and vulnerabilities.

Stay up to date with emerging security threats, vulnerabilities, and technologies, and provide recommendations to enhance our security posture.

10+ years of experience in security and IT engineering with a strong focus on cloud-native environments.

Expert knowledge of cloud platforms such as AWS, Azure, or GCP.

Associate degree required or equivalent combination of relevant work experience and education will be considered in lieu of a degree.

Develops enterprise network security definition requirements, design, and operational support documentation.

With supervision, coordinates and manages enterprise vendors, service providers, Facilities, and other IT service lines.

Minimum 2 Years of experience in enterprise network security infrastructure.

Preferred Recognized & Certified Network Security Certification (E.g. Checkpoint Certified Security Administrator).

Research emerging network security technologies, participating in IT Architectural discussions and designs.

Experience with data protection technologies including encryption, key management, data loss prevention, and hardware security modules.

Bachelor's degree in Computer Science, Electrical Engineering, a related technical field, or equivalent practical experience.

3 years of experience in a network security engineering role in organizations with networks.

Experience identifying and mitigating network security risks using threat modeling and other risk identification techniques.

Experience building distributed security systems and available services.

Experience writing software in any one of the modern programming language such as Go, C++, C, or Python.

Demonstrates excellent time management and prioritization skills

Network Security: Proven experience with IDS/IPS, Firewall, Web Proxy, DNS, Load Balancing, Wireless and Remote Connectivity

Expertise in Infrastructure Security: In-depth understanding of infrastructure security, including Windows, Active Directory, Unix/Linux, Mobile Security, and Privileged Access Management.

Conduct Thorough Configuration Audits: Perform exhaustive audits of switches, routers, firewalls, load balancers, remote access systems, wireless systems, and internet connections.

Monitor Public IPs: Proactively oversee public IPs for potential exposure, vulnerabilities, and misconfigurations, thereby mitigating potential risks.

Network Segmentation Specialist: Sound knowledge of network segmentation strategies and implementation.

Excellent communication, organizational and time management skills

Bachelor degree or equivalent combination of education and relevant experience

Senior level technical certification or equivalent (CISSP, CCSP, MCSA) with demonstrated relevant experience

QUALIFICATIONS AND SPECIAL SKILLS REQUIRED:

Demonstrate strong meeting facilitation, spoken and written communication skills, lead productive discussions, and drive consensus working with technical, and business stakeholders

At least 12 years of Information Security architecture, project, and engineering experience and at least 10 years with a large organization

Knowledge of WAN technologies: OC-X, Ethernet, MPLS, SONET Knowledge of Public DNS Knowledge of Network Management (SNMP, MIB)

Knowledge of Systems Management/Monitoring – SolarWinds, MRTG, PRTG, Cisco Prime

Knowledge of Remote Access Platforms, such as Cisco AnyConnect, Netskope Private Access, and Secure Web Gateway

A top-notch network engineer should have excellent troubleshooting skills, stay current with industry trends, and should be a team player.

Knowledge of Wireless technologies (802.11a/b/g/n, WPA2, WLC, WAP)

Knowledge of Virtual Servers and VMWare environment

Provide security metrics from the environment that can be used by several groups and teams including senior management.

Minimum of 4 years of experience in network security engineering, with a focus on Check Point, Fortinet, and F5 technologies.

Strong knowledge of load balancing, VPNs, and network security best practices.

Minimum of 3 years of experience with scripting and automation tools using Python and Linux systems.

Excellent analytical, problem-solving, and communication skills.

A self-starter with sound problem-solving, analytical, and troubleshooting skills

Provide continuous examination and management of the network and security practices and implementations in the IT Systems infrastructure

Review policies and implementations of open source software security management

Enable close collaboration among Engineering, IT, senior management and customers/partners regarding implementation and maintenance of strong cyber security

Research, understand, and document business processes, product/system security architecture, associated access requirements, and authentication/authorization methods, requirements and constraints

Maintain advanced knowledge within various industry regulatory frameworks (SOX, ISO, NIST, MPA, PCI, PKI)

Provide input, manage and coordinate security incident responses

Experience with security technology management and operations, including system deployment, maintenance and troubleshooting in a global enterprise environment

Experience with change and incident management processes

Experience with explosive growth and variable requirements

Manage various security systems and appliances including Palo Alto firewalls, ASA firewalls, F5 Load Balancers, logging, and other devices.

Collaborate in creating business monitoring requirements

Experience with managing and operating firewalls, load balancers, and content filtering