8 jobs found

Job Description: Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world's largest organizations, including one of every four Fortune 500 companies. They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection. Schedule & Location Employment type: Full-time, salaried position Location: Remote, within commutable distance of FM's Corporate Office in Johnston, Rhode Island. On-site presence at the Corporate Office is expected 1 to 2 days per week, depending on business needs. Relocation: Relocation assistance is not available for this position Position Summary Come join a newly formed team driving security architecture for a global Fortune 500 company. FM is building its Security Architecture function, and we're looking for a Senior Security Architect to be our subject matter expert for network security. Network security is your starting focus. As the function grows, your scope may expand into other security domains, based on your skills and the organization's needs. In this role, you'll define how network security controls are designed, standardized and governed across a global network that supports dozens of locations in countries around the world. That includes today's offices, internet perimeters and private wide-area networks, and the cloud-first, software-delivered network we're moving toward, with Microsoft Azure at its center. This is an individual contributor role for a forward-thinking architect with deep network security expertise and experience working in a modern cloud and DevOps environment. The ideal candidate connects the threat landscape to architecture decisions and sees the value of managing network and security configuration as code, but can also navigate the code itself or the management console to confirm that implemented configurations and architectures match design intent. What You'll Do Set the standard: Define control design intent, technical standards and evaluation criteria for network security across our global environment. This covers next-generation firewalls (NGFWs), network segmentation, secure ingress and egress, web application firewalls (WAFs), DNS and edge protection, intrusion detection and prevention (IDS/IPS), SASE, ZTNA, and remote and branch access. Build reusable patterns: Create reference architectures and patterns for on-premises, hybrid and Azure environments, including areas that don't have them today, so most work can move forward without case-by-case review. Drive modernization: Own the network security strategy and roadmap, including our move toward secure access service edge (SASE), zero trust network access (ZTNA) and identity- and application-aware segmentation. Sequence the work to align with business direction and stay ahead of evolving threats. Champion security as code: Promote infrastructure-as-code and configuration-as-code practices, along with CI/CD controls, so network and security changes are consistent, peer-reviewed, traceable and auditable. Apply a risk-based approach: Translate security policy and risk intent into clear technical requirements, working with engineering teams to ensure requirements are practical, implementable and appropriate for the environment. Be clear about where controls are required, where they can be tailored and why. Stay connected to implementation: Work closely with network security engineers to understand how designs are implemented in practice. Be comfortable reviewing configurations in firewall, SASE, WAF and cloud consoles and in code repositories, both to validate design intent and to identify opportunities to strengthen or evolve our architecture. Help define criteria for independent control validation and work with engineering teams to interpret and act on the findings. Guide decisions: Review and approve designs, patterns and exceptions against defined criteria, document architecture decisions, and represent security in architecture review forums. Collaborate across teams: Partner closely with enterprise architecture and with the network security, platform, and cloud engineers that operate security controls. Bring architectural perspective together with their hands-on expertise to develop solutions that are secure, practical and operable at scale. Stay close to implementation and work with engineering teams rather than operating platforms directly. Anticipate threats: Keep up with adversary techniques, attacks on network edge and remote access, and changes in platforms and the industry, and design for where the environment is heading. Communicate and mentor: Explain network security risk and requirements clearly to non-security audiences, and help develop other architects through coaching, design review and feedback Qualifications: 8 or more years of experience in IT or cybersecurity, with significant responsibility for network security architecture, engineering or design. Experience designing resilient, redundant global network architectures, including SD-WAN, MPLS and hybrid connectivity. Experience designing enterprise network security architectures, including NGFWs, segmentation, DMZs, secure ingress and egress, and IDS/IPS. Architecture-level experience with enterprise NGFW platforms, and enough hands-on depth to assess configurations directly. Strong Microsoft Azure network security experience, including virtual networks, network security groups, routing, private connectivity, and cloud ingress and egress. Strong networking fundamentals, including BGP, routing, IPsec, VLAN/VRF, load balancing and troubleshooting complex traffic flows. Experience with infrastructure as code, configuration as code, version control and CI/CD practices for network or security changes. Experience designing zero trust segmentation and SASE/ZTNA architectures. Understanding of the current threat landscape and how it informs network security architecture. Familiarity with data protection and data loss prevention concepts, and with how network controls support them. Familiarity with the risks of enterprise AI use. Experience with AI architectures or enterprise AI deployments is a plus but not required. Experience creating reference architectures, reusable control patterns, exception criteria and decision records that hold up across teams. Sound judgment in making and defending decisions when requirements conflict, and in knowing when to escalate. Clear communication with technical and business audiences, and the ability to build agreement across engineering, platform, risk and product teams. Education Bachelor's degree in computer science, information systems, engineering, cybersecurity, or a related field. A comparable combination of education and relevant experience may be considered. Even if your background doesn't match every requirement, we encourage you to apply. The hiring range for this position is $138,000 - $198,000 a year. The final salary offer will vary based on geographic location, individual education, skills, and experience. The position is eligible to participate in FM's comprehensive Total Rewards program that includes an incentive plan, medical, dental and vision insurance, life and disability insurance, well-being programs, a 401(k) and pension plan, career development opportunities, tuition reimbursement, flexible work, and time off, including vacation and sick time. FM is an Equal Opportunity Employer and is committed to attracting, developing, and retaining a diverse workforce.

Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.

Job Description Job Description Company Overview: Over the past 15 years, eTel has delivered essential solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. By integrating new technologies and ensuring reliable operations we help agencies stay prepared for future challenges As a premier technology solutions and services company to the US federal government, eTel possesses longstanding relationships across the federal civilian marketplace. Other customers include the broader Treasury Department, Commerce Department, and State Department. eTel offers integrated CMMI Level 3 processes, tools, and techniques with innovative, cost-efficient, and secure solutions to address complex challenges. eTel also holds ISO 9001:2015, ISO/IEC 27001:2013, and ISO/IEC 20000-1:2018 certifications, and offers dedicated subject matter experts (SMEs) and thought leaders that possess a deep understanding of customers' environments and challenges. Work Location and On-Site/Telework Requirements: Hybrid - NIH, Bethesda, MD. On site for workshops and pilots (typically 1-2 days/week during the first 120 days, then as scheduled). Citizenship: U.S. Citizenship required Clearance: All staff must obtain NIH suitability and a PIV credential and be fluent in English. Anyone doing risk or vulnerability testing needs a current T2 (BI) or higher investigation. Salary Range: $130,000-$140,000 yearly salary Overview : You will co-author the cloud, network, and identity design patterns behind NIH's Future State ZTA under the NIH Governance, Risk & Compliance (GRC) Zero Trust Architecture (ZTA) Support Services task order for the NIH Office of the Chief Information Officer (OCIO). You will work in the Architecture Pod on Tasks 2, 3, and 4. This is a design and advisory role: you will produce reference architectures, patterns, and control mappings for NIH teams to implement, not operate NIH production systems. Deep hands-on engineering experience is still essential. Responsibilities : Co-author the cloud, on-premises, and hybrid reference architectures (Subtask 2.2) with the Senior ZT Architect, as reusable design patterns with NIST SP 800-53 Rev 5 control mappings. Design microsegmentation and workload-identity patterns (NIST SP 800-207A, CISA and NSA Zero Trust guidance), software-defined perimeter for HPC clusters, and isolated VLANs with brokered remote access for laboratory instruments. Document how centrally provided network, endpoint, and logging services are inherited, as input to the Centrally Provided Services Matrix. Define technical policy anchors for the network and device pillars (segmentation policy in the controller, compliance policy in endpoint management). Map controls to telemetry so continuous-monitoring evidence is collected rather than written by hand. Support Task 3 network use cases: flow baselining to generate and validate microsegmentation policy, and lateral-movement anomaly detection. Support the Task 4 gap assessment for the network, device, and cloud pillars, and the evidence expectations in the ZTA Overlay. Validate patterns with IC engineering teams (CIT, HPC, and clinical platform owners). Tools & Technology Environment : AWS and Azure (including GovCloud), cloud-native IAM and CSPM; SSE/ZTNA (e.g., Zscaler, Palo Alto); microsegmentation platforms (e.g., Illumio); Palo Alto/Fortinet/Cisco firewalls; Microsoft Defender, CrowdStrike, Forescout; Splunk/Microsoft Sentinel; Terraform/IaC; Git. Required Qualifications : Bachelor's degree plus 7+ years of network and/or cloud security engineering. Hands-on experience with identity-aware access, microsegmentation, and cloud security patterns in enterprise environments. Experience with firewalls, SSE/ZTNA, and native AWS or Azure security services. Security+ or a higher security certification. Ability to obtain an NIH suitability determination and PIV credential; fluent in English. Preferred Qualifications : A cloud security certification (AWS Security Specialty, AZ-500, or CCSP); PCNSE or CCNP Security. Experience in FedRAMP-authorized or GovCloud environments. Experience with research networks, HPC (Linux/Slurm), or operational technology/IoT device segmentation. Infrastructure-as-code (Terraform, CloudFormation) and experience writing security patterns as code. Current National Institutes of Health (NIH) or U.S. Department of Health and Human Services (HHS) experience is highly preferred. Commitment to Diversity - eTelligent Group provides equal employment opportunities (EEO) to all applicants without regard to race, color, religion, gender, sexual orientation, gender identity, nations origin, age, disability, genetic information, marital status, amnesty, status as a covered veteran, and any other characteristic provided in accordance with applicable, federal, state and local laws.

Job Description Job Description Benefits: Competitive salary 6-Month Contract-to-Hire (CTH) Experience Level Senior Level (5 or more years of experience) Role Overview The Network Security Engineer serves as a technical Subject Matter Expert (SME) responsible for designing, deploying, administering, and optimizing enterprise network security infrastructure. This role focuses on architecting and managing Palo Alto Networks Next-Generation Firewalls (NGFWs), Cisco Firepower/ASA firewalls, Cisco ISE (Identity Services Engine), VPN infrastructure, and SD-WAN security to protect network perimeters and secure multi-site data flows across a regulated financial institution. Key Responsibilities Firewall Engineering & Perimeter Defense • Design, deploy, and manage Palo Alto Networks Next-Generation Firewalls (NGFWs) using Panorama, configuring NAT, App-ID, User-ID, Threat Prevention, URL Filtering, and WildFire. • Administer and maintain Cisco ASA and Firepower (FTD/FMC) firewalls, managing access control policies, IPS tuning, and platform lifecycle upgrades. • Lead investigations and incident responses for network-layer security alerts, policy violations, and anomalies. Network Access Control & Secure Connectivity • Administer Cisco Identity Services Engine (ISE) for Network Access Control (NAC), 802.1X authentication, RADIUS/TACACS+, device profiling, and guest access. • Manage and maintain VPN infrastructure (Cisco AnyConnect / Secure Access and site-to-site IPSec tunnels), supporting certificate-based authentication and split-tunnel configurations. • Configure and secure Cisco Catalyst SD-WAN environments, enforcing application-aware policies, traffic segmentation, and encrypted transport. • Administer Cisco Umbrella / Secure Access DNS-layer security, category-based controls, and web filtering policies. Architecture, Compliance, & Change Management • Collaborate with Cloud, Infrastructure, and Information Security teams to implement network segmentation, zero-trust controls, and security standards aligned with PCI-DSS, SOX, and NIST frameworks. • Author, review, and execute ITIL-aligned change management requests, presenting to Change Advisory Boards (CAB) and conducting post-implementation reviews. • Maintain comprehensive technical documentation, including firewall rulesets, network security architecture diagrams, runbooks, and standard operating procedures (SOPs). Required Qualifications • 5 or more years of hands-on experience in network security engineering, enterprise firewall administration, and perimeter security (CCNP Security-level expertise). • 3 or more years of hands-on experience designing, deploying, and managing Palo Alto Networks NGFWs and Panorama. • Solid hands-on experience administering Cisco ASA and Firepower (FTD/FMC) firewall environments, access control policies, and platform upgrades. • Strong working knowledge of Cisco ISE for NAC, 802.1X, RADIUS/TACACS+, and device profiling. • Experience configuring and troubleshooting enterprise VPN solutions (Cisco AnyConnect, Secure Access, IPSec site-to-site tunnels). • Solid understanding of core networking protocols, routing, and security concepts (TCP/IP, BGP, EIGRP, ACLs, NAT, SSL/TLS inspection, network micro-segmentation). • Experience working within an ITIL-based change management framework. • Must be legally authorized to work in the United States without current or future visa sponsorship. Preferred Qualifications • Industry certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Cisco Certified Network Professional Security (CCNP Security), or CCIE Security. • Familiarity with financial regulatory frameworks and compliance standards (e.g., FFIEC, PCI-DSS, SOX, NIST CSF). • Experience with Microsoft Azure networking and cloud security (Azure Firewall, NSGs, Virtual WAN, ExpressRoute). • Experience utilizing automation scripts (e.g., Python, Ansible) for firewall configuration and policy management. Core Skills & Attributes • Exceptional analytical, problem-solving, and root-cause diagnostic abilities for complex network security issues. • High accountability and attention to detail when executing production changes and maintaining documentation. • Excellent interpersonal and communication skills to collaborate with cross-functional IT teams, security leaders, and external auditors. • Self-driven approach to continuous learning and staying current with evolving cybersecurity threats. Flexible work from home options available.

Job Description Job Description Short Description: Q009 - NSE Candidates local to the DMV area only Complete Description: Senior Network Security Engineer II supports the ongoing design, implementation, operation and security of the OCFO network and the supporting security infrastructure. Duties & Responsibilities: Ability to monitor and analyze data traffic patterns within the OCFO network infrastructure; Identify network problems and recommend improvements to ensure optimal performance; Ability to improve network quality regarding any degradation; Ability to enhance security and knowledge of the latest security threats, worms and malware and advise on how to deter them; Ability to ensure reliability and stability of the work through the above actions; Configure routers, switches, firewalls and other appliances in compliance with OCFO security standards Monitor security measures in place within network perimeter, ensuring breaches do not occur and information is safeguarded from unauthorized access; Proactively oversee the activities involved in quality resolution of complex technical issues, responding with an appropriate sense or urgency to problems escalated to Network Engineer's level; Coordinate with appropriate personnel to determine positive solutions that increase end user satisfaction, following through to completion, and communicating resolution results; escalate to management any situation that could adversely impact the service provided to the end user; Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future occurrences and improve customer service levels in an appropriate timeframe; Provide network design services Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical approach to be used for proposed network changes; Ensure adherence to network policies and procedures; Manage production and disaster recovery networks and security Ability to perform forensic and packet analysis; Ability to configure and operate network security-focused monitoring and logging systems Qualifications: Experience building large scale, multi-site network architectures Experience with secure remote access/WAN technologies (IPsec, VPN, etc.) Knowledge of network-based and system-level attacks and mitigation methods Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls; Experience with security routing protocols Technical Skills: Security: Cisco Firepower (Next generation firewall), Cisco ASA Firewalls, Cisco ISE 2.0 and above (Identity Services Engine), Cisco NGFW (Next Generation Firewall), Cisco AMP (Advanced Malware Protection), Cisco Firepower. Candidate Skills Matrix: Following sections are to be filled by the candidate: Skills Required/Desired No. of Years How many years of experience candidate has? Experienced in the development, configuration, installation, and maintenance of networked systems including LANs, WANs and Telephony Systems Required 4 Experience with network standards, protocols, and procedures Required 4 Experienced in network architecture and topology, including transmissions protocols, broadcasting, switching, control, and management Required 4 Experience in performing routing networking configuration management functions. Required 4 Experienced in network systems management methods including end-to -end systems performance monitoring. Required 4 Certification in network or system administration is highly desired, such as CCNA, CCNP, CCIE, CISSP, MCSE, MCSA Required 4 Background check: Extensive criminal history background check will be required. We cannot submit candidates with recent histories (go back seven years) of extensive driving, drug, robbery or any other illegal activity. Any criminal activity on the background check will eliminate the candidate from consideration. If selected, please make certain that you inform all candidates that they will have to complete this criminal background check prior to starting. NATIONAL background checks are required; Federal background checks are NOT compliant under this contract. A national background check is a national criminal background check that pulls criminal records from State and County Courts in almost every US State.

Job Description Job Description Job Description: Short Description: Q009 - NSE Candidates local to the DMV area only Complete Description : Senior Network Security Engineer II supports the ongoing design, implementation, operation and security of the OCFO network and the supporting security infrastructure. Duties & Responsibilities: Ability to monitor and analyze data traffic patterns within the OCFO network infrastructure; Identify network problems and recommend improvements to ensure optimal performance; Ability to improve network quality regarding any degradation; Ability to enhance security and knowledge of the latest security threats, worms and malware and advise on how to deter them; Ability to ensure reliability and stability of the work through the above actions; Configure routers, switches, firewalls and other appliances in compliance with OCFO security standards Monitor security measures in place within network perimeter, ensuring breaches do not occur and information is safeguarded from unauthorized access; Proactively oversee the activities involved in quality resolution of complex technical issues, responding with an appropriate sense or urgency to problems escalated to Network Engineer's level; Coordinate with appropriate personnel to determine positive solutions that increase end user satisfaction, following through to completion, and communicating resolution results; escalate to management any situation that could adversely impact the service provided to the end user; Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future occurrences and improve customer service levels in an appropriate timeframe; Provide network design services Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical approach to be used for proposed network changes; Ensure adherence to network policies and procedures; Manage production and disaster recovery networks and security Ability to perform forensic and packet analysis; Ability to configure and operate network security-focused monitoring and logging systems Qualifications: Experience building large scale, multi-site network architectures Experience with secure remote access/WAN technologies (IPsec, VPN, etc.) Knowledge of network-based and system-level attacks and mitigation methods Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls; Experience with security routing protocols. Technical Skills: Security: Cisco Firepower (Next generation firewall), Cisco ASA Firewalls, Cisco ISE 2.0 and above (Identity Services Engine), Cisco NGFW (Next Generation Firewall), Cisco AMP (Advanced Malware Protection), Cisco Firepower.

Job Description Job Description Role: Senior Network Security Engineer II Client : DC Government location: Washington, DC (Onsite) Job Description: Duties & Responsibilities: Ability to monitor and analyze data traffic patterns within the OCFO network infrastructure; Identify network problems and recommend improvements to ensure optimal performance; Ability to improve network quality regarding any degradation; Ability to enhance security and knowledge of the latest security threats, worms and malware and advise on how to deter them; Ability to ensure reliability and stability of the work through the above actions; Configure routers, switches, firewalls and other appliances in compliance with OCFO security standards Monitor security measures in place within network perimeter, ensuring breaches do not occur and information is safeguarded from unauthorized access; Proactively oversee the activities involved in quality resolution of complex technical issues, responding with an appropriate sense or urgency to problems escalated to Network Engineer's level; Coordinate with appropriate personnel to determine positive solutions that increase end user satisfaction, following through to completion, and communicating resolution results; escalate to management any situation that could adversely impact the service provided to the end user; Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future occurrences and improve customer service levels in an appropriate timeframe; Provide network design services Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical approach to be used for proposed network changes; Ensure adherence to network policies and procedures; Manage production and disaster recovery networks and security Ability to perform forensic and packet analysis; Ability to configure and operate network security-focused monitoring and logging systems Qualifications: Experience building large scale, multi-site network architectures Experience with secure remote access/WAN technologies (IPsec, VPN, etc.) Knowledge of network-based and system-level attacks and mitigation methods Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls; Experience with security routing protocols Technical Skills: Security: Cisco Firepower (Next generation firewall), Cisco ASA Firewalls, Cisco ISE 2.0 and above (Identity Services Engine), Cisco NGFW (Next Generation Firewall), Cisco AMP (Advanced Malware Protection), Cisco Firepower. Job Type: Full-time Experience: Bachelor's degree in IT or related field or equivalent : 4 years (Preferred) Cisco Firepower, ASA Firewalls, NGFW : 2 years (Preferred) install, maintenan of n/w systems including LANs, WANs : 4 years (Preferred) network standards, protocols, and procedures: 4 years (Preferred) network architecture and topology, : 4 years (Preferred) transmissions protocols, broadcasting, switching, control,: 4 years (Preferred) routing networking configuration management functions.: 4 years (Preferred) end-to -end systems performance monitoring.: 4 years (Preferred) CCNA, CCNP, CCIE, CISSP, MCSE, MCSA: 4 years (Preferred)

Job Description Job Description Senior Network Security Engineer -Long-Term Contract (Government) Position Title: Network Security Engineer(NSE) Worksite Address: Washington, DC Interviews: In Person Or Webcam Only Short Description: NSE Candidates local to the DMV area only Complete Description : Senior Network Security Engineer II supports the ongoing design, implementation, operation and security of the Client network and the supporting security infrastructure. Duties & Responsibilities: Ability to monitor and analyze data traffic patterns within the client network infrastructure; Identify network problems and recommend improvements to ensure optimal performance; Ability to improve network quality regarding any degradation; Ability to enhance security and knowledge of the latest security threats, worms and malware and advise on how to deter them; Ability to ensure reliability and stability of the work through the above actions; Configure routers, switches, firewalls and other appliances in compliance with client security standards Monitor security measures in place within network perimeter, ensuring breaches do not occur and information is safeguarded from unauthorized access; Proactively oversee the activities involved in quality resolution of complex technical issues, responding with an appropriate sense or urgency to problems escalated to Network Engineer's level; Coordinate with appropriate personnel to determine positive solutions that increase end user satisfaction, following through to completion, and communicating resolution results; escalate to management any situation that could adversely impact the service provided to the end user; Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future occurrences and improve customer service levels in an appropriate timeframe; Provide network design services Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical approach to be used for proposed network changes; Ensure adherence to network policies and procedures; Manage production and disaster recovery networks and security Ability to perform forensic and packet analysis; Ability to configure and operate network security-focused monitoring and logging systems Qualifications: Experience building large scale, multi-site network architectures Experience with secure remote access/WAN technologies (IPsec, VPN, etc.) Knowledge of network-based and system-level attacks and mitigation methods Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls; Experience with security routing protocols Technical Skills: Security: Cisco Firepower (Next generation firewall), Cisco ASA Firewalls, Cisco ISE 2.0 and above (Identity Services Engine), Cisco NGFW (Next Generation Firewall), Cisco AMP (Advanced Malware Protection), Cisco Firepower.