Lead Network Security Specialist Infrast

Avangrid; City of Rochester (NY); On-site; USD 106,000 - 133,000; Full time

Benefits offered by this job

Competitive benefits and growth

Bonus program

12% 401(k) match

Health, dental, and vision insurance

Tuition reimbursement

Professional development

Job summary

Avangrid is seeking a Lead Network Security Specialist Infrastructure in Rochester, NY. The role leads engineering, installation and administration of network security for critical infrastructure, translating business requirements into secure solutions and processes.

Responsibilities include incident response, change planning, vendor and contractor coordination, and 24x7 on-call support. Requires 10+ years in enterprise infrastructure and deep Cisco/Checkpoint/Palo Alto experience, with strong

Qualifications

• AS/BS/MS in a technical field with 8–12+ years of experience
• 10+ years in enterprise infrastructure
• Experience with multiple areas: data center operations, DR/BCP, security & compliance, infrastructure policies, and/or technical project coordination
• Operational experience configuring Cisco Nexus 9K/ Catalyst/ ASR/4K, ISE, Firepower, ASA

Responsibilities

• Respond to incidents to meet SLAs
• Design, plan and implement infrastructure changes
• Lead technical implementation plans for infrastructure technologies
• Mentor team members and manage contractor delivery
• Maintain regulatory compliance under NERC/CIP guidelines
• Provide 24x7 on-call support
• Lead evaluation and testing of hardware/software products

Skills

Network security

Security governance

Cloud architecture

VPN deployment

NERC CIP compliance

Education

AS Technical Related Degree

BS Technical Related Degree

MS Technical Related Degree

Tools

Cisco routers/switches/firewalls

Checkpoint & Palo Alto firewalls

Cisco ISE

Cisco Nexus/ASA/Nexus 9K/4K

Netscaler Citrix (NetScaler)

Job description

Position InformationJob Title: Lead Network Security Specialist InfrastructureLocation: Rochester, NYSalary Range: $106,000 - $132,500Schedule: On Site, Office, 5 days

Job SummaryServes as senior technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. Leads the engineering, installation, maintenance and administration of technical aspects for the OSG Infrastructure team supporting Critical Infrastructure. Responsible for translating business requirements into secure network solutions or process designs.

Key Responsibilities

• Provide timely responses to all incidents, tasks and requests assigned to meet Service Level Agreements.
• Work with internal clients, suppliers/contractors, project teams and other technical staff to identify, design and support technical solutions.
• Design, plan and implement changes to the environment for improvements or projects
• Provide maintenance of infrastructure technologies following the change management process
• Lead the technical implementation plans in support of infrastructure technologies
• Leads others to solve problems
• Leads contractors to deliver services to projects and or operational duties as needed
• Leads functional teams or projects as assigned
• Lead the evaluation, selection, and testing of hardware and software products
• Maintain regulatory compliance under NERC/CIP guidelines
• Maintain high quality security controls surrounding the critical SCADA systems
• Perform/coordinate special assignments from OSG Infrastructure Management
• Provide 24x7 on call support
• Provide professional and technical mentoring for team members

Required Qualifications

Education and Experience Required:

• AS Technical Related Degree with 12+ years' technical experience, or BS Technical Related Degree with 8+ years' technical experience; or MS Technical Related Degree with 5+ years' technical experience
• Position requires a minimum of ten (10) years' experience working with infrastructure solutions in an enterprise environment
• Position requires professional experience with more than one of the following areas: Data Center Operations, Disaster Recover/Business Continuity Planning & Execution, Security & Compliance Management, Infrastructure Operational Policies & Procedures, and/or Technical Project Coordination
• Position requires Operational experience in an Enterprise Environment configuring and maintaining Cisco Routers/Switches/Firewalls such as Cisco Nexus 9K, Cisco Catalyst, Cisco ASR Routers, Cisco 4K Routers, Cisco ISE, Cisco Firepower, Cisco ASA
• Position requires Operational experience in an Enterprise Environment configuring and maintaining Next generation firewalls such as Checkpoint and Palo Alto

Skills/ Abilities:

• Expert within network infrastructure, operations & network security
• Proficient in professional standards and trends within area of expertise
• Proficient in deploying Checkpoint, Palo Alto, Cisco ASA firewalls along with implementing VPN's
• Knowledge of multiple security technologies, to include network security, NAC, Micro segmentation, network security architecture
• Implementing security technologies such as SAML and PKI Infrastructure
• Network Access Control systems in a large enterprise
• Experience with authentication systems such as RADIUS, TACACS+, SSO, LDAP Experience planning, researching, and developing security policies, standards, and procedures
• Experience with architecting in cloud environments (AWS, Azure, and GCP)
• SD-WAN and other tunneling\encryption transport technologies
• Network Security Automation and DevOps
• Strong Routing and Switching experience (BGP, OSPF, VPC, VXLAN, vain traffic engineering, Multicast, etc.

Preferred Qualifications

• Experience with packet capture software such as Wireshark, WinDump, tcpdump, etc.
• Experience with installing and configuring Citrix Netscalers in an Enterprise High Availability environment
• Experience with installing and configuring Cisco ISE in a distributed deployment with multiple personas
• Experience with Zero Trust Architecture
• Experience working in a regulated environment
• NERC/CIP experience a plus
• Experience with Cisco Nexus Dashboard Fabric Controller (Formerly DCNM)
• Experience using Solarwinds Orion platform suite of tools

Competencies

• Growth & Continuous Improvement
• Initiative & Change
• Focused on Results
• Customer Centric (internal and/or external)
• Communication
• Collaboration
• Leadership (people managers/leaders)

What We Offer

• Competitive benefits and growth opportunities
• Generous performance-based bonuses
• 12% 401(k) match
• Comprehensive health, dental, and vision insurance
• Tuition reimbursement
• Professional development and clear career-advancement pathways

For more information, please visit: Benefits - Avangrid#LI-Onsite; #LI-CH1Company:NY STATE ELECTRIC & GAS CORP

Mobility Information

Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law.If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at [e-mail] employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions. This does not include those that will work for Avangrid Power.Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee's management.Job Posting End Date:November-27-2026