This position manages Information Technology support for Client’s Atlanta office, supervising both internal staff and external contractors. The Senior Network Engineer is also responsible for leading SAS 70 compliance efforts in Atlanta, and is appointed as the Disaster Recovery Coordinator should the Connecticut office experience a major outage.
This position is responsible for securing and maintaining Client’s Local Area Networks and Wide Area Network. The Client network spans two locations, and supports multiple offices worldwide. The Senior Network Engineer will deploy and provide ongoing support for Cisco firewalls and routers, Cisco and other brand switches, Juniper SSL VPN, and Blue Coat proxy. The engineer ensures firewall and intrusion prevention policies are applied and maintained. This role is responsible for the operation of the LAN/WAN and must ensure each change to the environment is clearly documented, to include creating and updating all related engineering documents and drawings.
Due to the sensitive nature of the information which Client processes for its members, a key responsibility of this position is to manage the protection of our computing environment. The ongoing review and documentation of security logs is an essential duty for the incumbent.
The Senior Network Engineer fills a critical role in the ongoing effective operation and security of all Client Information Technology Systems.A failure to adequately perform the duties of the position may have significant consequences to Client, including loss of revenue and loss of reputation.
Nature and Scope:
This position reports to the AVP, Infrastructure and Information Security Officer.
The major challenge for the incumbent is to maintain an effective balance of innovation, system maintenance, and security. The Senior Network Engineer is expected to continuously seek solutions to improve our operating environment, to reduce the costs of ongoing maintenance, and to strike a balance between a high level of security and giving our staff the flexibility to work effectively.
In addition to being technically competent in the area of network management, the incumbent must have a high degree of interpersonal skill to communicate with all levels of staff and Client’s management on a regular basis.Incumbent must be capable of working without direct supervision, and must be able to interact effectively with all levels of Client management. The Senior Network Engineer must also effectively manage and develop their direct reports.
Minimum Qualifications:
Expert-level network expertise, including Cisco firewalls, preferably with Cisco certification
Must have an expert understanding of the TCP/IP stack and 3-5 years experience supporting LAN and WAN networks with hosts running Windows XP, Windows Server 2003 and Linux. Must have a strong understanding of application transport and network infrastructure protocols (SSL/TLS, DNS, DHCP, WINS, NTP, FTP, HTTP, SMTP, CIFS, LDAP, and Microsoft AD) and their relationship to end-user applications
Experience configuring and troubleshooting GRE and IPSEC encrypted tunnels between multiple routers and firewalls
Must have recent hands-on technical experience installing, configuring, documenting, and providing ongoing support for Cisco PIX and/or ASA 5500-series firewalls, and Cisco routers at multiple customer sites. Must demonstrate a strong understanding of Cisco PIX / ASA 7.x and Cisco IOS 12.x command syntax
Must have experience modifying firewall rule sets, studying network traffic flows to reverse-engineer the required firewall rules to lock down an application, and troubleshooting firewall problems in an enterprise or service provider environment under short time constraints involving complex network application flows between multiple hosts spanning multiple firewalls and different geographic locations
Must have excellent problem solving skills and a solid understanding of troubleshooting connectivity and performance issues involving firewalls, routers, network applications, and WAN circuits (T-1, MPLS, Metro-Ethernet)
Excellent planning and coordination skills
Experience in managing direct reports, including the setting of goal and ongoing performance appraisals
At least 3 years experience coordinating with Cisco TAC, nation-wide telecommunication carriers, tracking and escalating trouble tickets, and interfacing with customers at all levels
Must have experience in developing and implementing Disaster Recovery plan and have led Disaster Recovery testing exercises.
Preferred Qualifications:
Bachelors degree in computer science or a related technical field or equivalent work experience required
Experience with Blue Coat proxy and WAN Acceleration
Experience in configuring and managing Juniper SSL VPN
·Past experience as a system administrator for Windows servers is a plus
·Previous experience in a highly-controlled environment with SAS 70 certification.
PRINCIPAL ACCOUNTABILITIES
Responsible for the architecture and design of the Client networking infrastructure to deliver services with high availability and reliability
Developing departmental specifications, policies, procedures and standards to guide the management of the networking infrastructure Responsible for day to day coordination and planning with her/his counterparts on the business side
Working closely with application and database teams to coordinate system upgrades, maintain optimal performance and ensure appropriate levels of system redundancy are maintained
Ensuring the development of complex software interfaces needed to transfer data between platforms and databases
Providing leadership for the design, integration, and maintenance of network and server services such as: Blue Coat WAN Acceleration, Routing protocols, IPSEC and SSL VPNs, network security, operating systems and server hardware
Hands-on network manager, engineer and leader designing and implementing the backend infrastructure including firewalls, switches, routers, proxy servers, WAN accelerators and enterprise systems and storage solutions
Manage network engineers and client services staff, conducting employee reviews and mentoring
Implementation and maintenance of business critical clustered and failover systems and enterprise storage systems
Developing and executing Disaster Recovery plans including annual testing
Responsible for budget management and invoice tracking
Responsible for ensuring that policies, procedures and standards are followed
Responsible for coordination of penetration testing, networking and security, including knowledge of all elements of LAN, WAN and Internet, vulnerability assessments, intrusion detection systems and firewalls
Responsible performing risk assessments and other Certification & Accreditation (C&A) activities in accordance with PCI-DSS and our SAS-70 policies
Performing special projects and other duties as assigned
Benefits & Perks
·Your Health – Medical , Dental, Medical Flexible Spending Account, Short-Term Disability, Long-Term Disability Supplemental Income Protection, Life Insurance EFFECTIVE IMMEDIATELY(STD, LTD, Life – 100% paid by Client)
·On-Site Health Club
·Your Family – Dependent Care Flexible Spending Account, Employee Assistance Program and Referral Service, Family Medical Leave, Dependent Life Insurance, On-Site Childcare Facility in office park
·Your Future – 401(k) and Profit Sharing Plans
·Your Time – Vacation, Holidays, Floating Holidays – EFFECTIVE IMMEDIATELY
·Your Education – Tuition Reimbursement Program, Company Sponsored Assistance for Professional Industry and Non-Industry Designations
·Your Life – Flexible Work Schedules, Excellent Working Environment, Business Casual Dress Environment, Employee Recognition Program, Anniversary Service Awards