Sr. Network Security Engineer

The Senior Network Security Engineer is the subject matter expert in designing and implementing the Network security strategy and platforms for the next-gen operations for all networks including the Property Networks, Datacenter/Cloud Networks, and Corporate Networks. This role will collaborate with a matrixed team of expert network architects and engineers to drive adoption of DevOps/SRE practices and operating models across all network product towers, and around the globe.

· Undergraduate degree in an engineering or computer science discipline and/or equivalent experience/certification

· 7+ years’ experience in information technology including 5+ years’ experience in the implementation of WAN, LAN, and datacenter networks with a focus on mission critical, customer-facing applications and services and that also includes some or all of the following:

o Experience in installing, configuring, and troubleshooting of Security tools Cisco ISE and Firemon

o Expertise in enterprise-wide design and administration of devices and policies in Cisco ISE and Firemon.

o Advanced knowledge of leveraging the orchestration APIs in Cisco ISE and Firemon for developing scripts

o Experience in firewalls, network management, wired and wireless network peripherals in supporting security products like Firemon and Cisco ISE

o Advanced knowledge of AAA, RADIUS and TACACS+ protocols, performing packet captures and analysis.

o Experience with firewalls and firewall management tools (Checkpoint MDS, Palo Alto Panorama) highly desirable

Preferred:

· Experience in Agile methodologies, daily stand-up meetings, sprint planning sessions and user story preparations

· Experience of policy development, certificate provisioning in Firemon and Cisco ISE products

· Advanced Degree (e.g., MS, PhD) in Computer Science or other technical discipline or MBA, preferably with a focus on technology.

· CCIE or CCNP certifications or on the path to these certifications. CCNA is acceptable as well.

· Working knowledge of PKI, 802.1X, 802.11x, DNS, DHCP, SNMP, and VPN

· Technical knowledge in networking (Cisco and non-Cisco) with an emphasis on software-defined networks.

· (SDN) and leveraging spine & leaf designs, load balancing, firewalls, security design (intrusion detection and prevention), DNS, NTP, Network Tools & Management

· Experience in researching emerging technologies and trends, standards, and products and synthesizing into clear technology roadmaps and strategies.

· Strong knowledge of emerging tools, software, applications, and systems for attaining best-in-class technology across the enterprise

· Excellent problem-solving skills working independently and through leading outcomes for cross functional teams.

· Excellent understanding of change management, testing requirements, techniques, and tools to ensure high availability of platforms Familiarity with multiple languages, including C++, Java, Python Perl, or another programming language Experience implementing solutions using API Management Platforms.

· Ability to perform independently as a member of a team and through cross functional initiatives

• Proven track record of driving transformation in network technologies, tools, and processes through a data driven continuous improvement methodology
  
• Demonstrated experience in delivering written documents detailing network solutions and diagrams Knowledgeable in modern in modern configuration management tools (Ansible, Chef, Fabric, etc.)
  

· Experience with Cloud Computing platforms (e.g., Amazon AWS, Microsoft Azure, Google Compute Engine)

• Proven experience driving operational performance through defining and enforcing Recovery Time Objective (RTO) and Recovery Point Objective (RPO) Service Level Agreements (SLAs)