Network Security Engineer

Description

The Senior Network Engineer serves as an expert in WAN/LAN and WI.AN infrastructure engineering, design, analysis and maintenance. Provides technical leadership for complex projects requiring additional specialized technical knowledge in network security engineering as well as network access control. Coordinates with technical and nontechnical employees and clients to detennine networking requirements. Ensures that network changes and improvements are successfully implemented and monitored to increase efficiency and stability. Acts as a mentor and senior resource for direction, training and guidance for less experienced staff. Perfonms network maintenance during, before and after business hours as required; must be able to support weekend maintenance windows. Monitors project schedules and costs. Leads in the evaluation of supplier proposals and requires minimal supervision. May be required to travel with short notice. Responsible for providing senior guidance and assistance with daytoday networlk security engineering and support of current and future wide area data networks in mentoring role with less senior NetCom employees to ensure the proper management of hardware and software resources to maintain data (LAN and WAN) network reliability. Leads effort to install, configure, maintain, troubleshoot and upgrade data networking hardware and software as required. Maintains corporate network access control via Cisco Identity Services Engine (ISE) and Cisco Secure Access Control System (ACS). Perfonms or coordinates maintenance where necessary. Perfonms maintenance and reviews of firewall ACLs and initiates the removal or modification of access to prevent unauthorized access to corporate. Establishes and maintains host to host, contact center, corporate area (MAN) and plant connectivity. Order, configure, install and troubleshoot employee data communications circuits and equipment. Uses voice and network management system tools to manage Hartand Clarke's enterprise (LAN/WAN) environments. 25% Plans and perfonns analysis of data network traffic, hardware, software, circuits and service utilization and monitors perfonnance, capacity, traffic utilization, hardware functionality, and operating system operation. Uses voice and network management systems tools to monitor Harland Clarlke's Data (LAN/WAN) environments. Proactively designs and implements enhancements as indicated by perfonnance measurements. 25% Lead the implementation of complex and major projects related to Data networks. Serves as technical lead for special projects as directed involving new data (LAN and WAN) network development and perfonmance. Perfonm miscellaneous network related projects as required. 20% Provide customer service and assistance, incident and problem resolution related to voice and/or data (LAN and WAN) network issues. Utilize tools to isolate and, if possible, resolve incidents and problems that occur in the Voice or Data networks. 15% Assist in the design and maintenance of Harland Clarke's enterprise Wide Area Network (WAN). Research technology developments and recommend improvements that lead to increased productivity, revenue enhancement and/or cost savings. Assist internal and external customers in defining their requirements. Provide guidance and support to customers regarding both corporate and IT security policies, procedures and standards. 10% Documents new processes and procedures induding assisting in evaluation and recommendation of operational and efficiency improvements. Update documentation as adds, moves and changes occur throughout the network. Ensures standards and procedures are followed and assure that the documentation is kept current. Trains and mentors Network Analysts. Sr Network Analysts and System Administrators on network standards and principles. 5% This is a security sensitive position. All employees are responsible for demonstrating the company's Core Values at all times and for using Perfonmance Excellence principles to continuously improve effectiveness, efficiency, products, and services. This includes, but is not limited to, participating on improvement teams, recommending and implementing improvement ideas, and participating in training and other activities to keep up to date on processes, information, etc. All employees are responsible for supporting and complying with internal and external audits, to indude providing information, performing assigned tasks to ensure compliance, and preparing and maintaining evidence that key duties identified as internal controls have been performed. All employees are responsible for supporting and complying with safety and security policies to promote a healthy working environment. Fouryear university degree or college diploma in the field of computer science or business and/or 10 years equivalent work experience. 10 plus years of experience in voice and/or data networking. Familiar with a variety of the field's concepts, practices, and procedures. Relies on extensive experience and judgment to plan and accomplish goals. Performs a variety of tasks. May lead and direct the work of others. A wide degree of creativity and latitude is expected. Advanced knowledge of enterprise WAN/LAN networking technologies Must have operational knowledge of and experience with Cisco Identity Services Engine (ISE) Advanced experience with Cisco ASA firewalls and AnyConnect (IPSec/SSL VPN) Expert knowledge of Routing Protocols such as BGP, and OSPF Experience with Cisco IDSnPS, ASDM, FireSight and Cisco Secure ACS Experience with enterprise level network access controlKnowledge of VoIP and WAN QOS preferred Operational knowledge of Cisco and/or Aruba WLAN controllers and devices a plus but not required Cisco CCNP certification or CCNP Security strongly preferred, accompanied by a CISSP or GIAC certification will be considered a major plusCisco CCNA Security certification may be consideredExperience supporting medium to large multisite corporate networks. Familiar with network topologies such as MPLS, ATM, DWDM, SON, SONET, etc. Knowledge of F5 load balancers a plus Familiarity with PCI and SOX audit requirements a plus Supervisory Responsibility Does not supervise other employees however, will be required to perform peer reviews and provide technical oversight of work performed by junior engineers. May lead and direct the work of others on occasion. A widedegree of creativity and latitude is expected. Communication & Contacts Required 1. Senior management at Corporate 2. All Corporate employees 3. Customer Service Centers 4. Vendors and suppliers.