Description:
Senior Network Security Engineer
Purpose of the role
The Senior Network Security Engineer is responsible for supporting the design, configuration, monitoring and maintenance of network security hardware, systems, and software; including preparing any documentation for future reference and ensuring communication regarding network security and other issues is provided timely.
Accountabilities
- Be the lead technical role in resolving complex service incidents, applying diagnosis, maintenance, change and configuration control attributes to bring about a resolution.
- Consistently perform and deliver outputs within the service contract time constraints (KPI’s & OLAs/SLA’s).
- Apply technical governance to inbound deliveries from the project design phase to ensure they accurately reflect the live environment and are appropriately structured to enable successful technical service delivery.
- Develop and implement detailed logical designs in areas of – Firewalls, Load balancers, Layer 3 VPN, Layer 2 VPN.
- Analyse traffic behaviours, identify and resolve any congestion or traffic issues related to network security hardware or protocols.
- Develop secure network designs, maximizing the usage of equipment such as routers and switches.
- Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.
- Work with internal and external stakeholders to fill information gaps and communicate architecture and technical solutions.
- Establish procedures and best practices for network security operations.
Key Stakeholders
External:
- Strategic and operational third-party partners
- IAG Operating Companies
Internal:
- Network Product Manager
- Network Support Manager
- Network Solutions Architecture Manager
- Senior Network Engineers
- Capacity, Release & Deployment Manager
- Network Services Manager
- Network Operations Centre Engineers
- Tooling Engineer
- Governance and Reporting Manager
People Specification
Qualifications
Educated to degree level or equivalent experience.
Desired qualification
- Bachelor’s degree in computer science, Information Technology, or a related field.
Relevant industry certifications such as:
- CISSP (Certified Information Systems Security Professional)
- CCNP (Cisco Certified Network Professional) Security certification, or equivalent knowledge and experience.
- Check Point Certified Security Administrator (CCSA)
- F5 Certified Technical Specialist (BIG-IP)
Skills
- Strong technical competence in Networking security
- Maintaining and updating firewalls and testing the organization’s network and systems - essential
- Knowledge and experience installing and supporting Checkpoint and F5 Appliances, and Cisco ISE - desirable
- Implementing network security blueprints prepared by security architects - essential
- Strong skills in interpreting, producing, and tracking technical documentation.
- Strong communications skills within a department to provide confidence and direction to level 2 colleagues.
- Ability to communicate effectively verbally and written with stakeholders at all levels, from end users to project managers, etc. and provide information which will support and influence the decision-making process within the Network Service Management.
- Ability to plan, prepare, and organize large scale implementations and project deliveries.
- Strong problem-solving skills. Able to identify and resolve problems timely, gather and analyze information effectively, and develop alternative solutions where appropriate.
- Strong interpersonal skills. Maintain confidentiality and listen to others.
Experience
- 5+ years’ experience required in a similar role.
- Experience in designing, deploying, and maintaining MPLS, VPN and VRF network cores.
- Functional understanding of Layer 2 functions and switching (VLAN, VXLAN, STP, MAC Filtering, etc.).
- Experience with VoIP.
- Experience with Cisco, Juniper and Palo Alto preferred.
- Knowledge of industry standard network systems designs and implementation.
- Knowledge of security and communications networks; and knowledge of technical and user-related aspects of a personal computer environment preferred.
- Experience with the following preferred: DNS, DHCPv4, DHCPv6, or IPAM/DDI.