Network Security Engineer

LevelUP HCS; New York (NY); On-site; USD 120,000 - 170,000; Full time

Job summary

LevelUP HCS in New York is seeking a Network & Security Engineer to support and enhance a global banking infrastructure. You will manage LAN/WAN, VPNs, DMZs and Fortinet FortiGate devices, with hands-on experience across F5 and Arista gear.

The role requires resilience, 24/7 production support and strict regulatory awareness. You will design, implement and optimize network solutions, collaborating with global IT teams, developers, and security functions.

Qualifications

• Excellent communication, interpersonal, organizational and documentation skills.
• Strong understanding of advanced routing/transport protocols in OSI layers.
• Current on networking and firewall trends in architecture and design.
• Working knowledge of UNIX (Solaris/Linux) and Windows.
• Understanding of VPN concepts, protocols and implementations.
• Experience in the Financial Industry's security requirements.
• Experience with Fortinet FortiGate firewalls.
• Arista ACE-A/L1 or L3 certification.
• Over 5 years in a similar position.

Responsibilities

• Administer all network infrastructures – LAN, MAN, WAN, VPN and DMZs with production support, fault and performance monitoring, improvements and capacity planning.
• Analyze & monitor networks continuously.
• Analyze and audit overall network security.
• Global network responsibilities – follow the sun.
• Engineer, design and implement best practices for network connectivity and DMZs.
• Provide connectivity solutions to internal customers – developers, analysts and other teams.
• Ensure compliance with Corporate Security policies and Change Control procedures.
• Troubleshoot networks, firewall, DNS and external connectivity issues.
• Administer FortiGate firewalls, F5 load balancers and FortiGate proxies.
• Document network infrastructure using Visio and related tools.
• Off hours and weekend support required.
• Allocation: 75% network admin, 15% firewall security, 10% voice support.

Skills

LAN/WAN

VPN

DMZ

Fortinet

F5

Arista switching

BGP

OSPF

PIM

UNIX/Linux

Windows

Network security

Tools

FortiGate

Arista switches

F5 load balancers

Job description

Seeking a Network & Security Engineer to support and enhance mission-critical global banking infrastructure, with hands-on expertise in enterprise networking (LAN/WAN, VPN, DMZ), routing protocols, and security platforms including Fortinet, F5, and Arista switching. The role requires experience operating in a highly regulated financial environment with strong focus on resilience, security, and 24/7 production support.

In this role, the person is responsible for engineering and administrating Network infrastructure. Ability to support large enterprise mission critical networks and develop new technology solutions. Provide technical expertise in working with clients and other GS-IT groups on network issues.

Key activities / Essential duties and responsibilities

• Administer all network infrastructures -LAN, MAN, WAN, VPN and DMZ’s including production support, fault and performance monitoring, improvements and capacity planning.
• Analyze & monitor networks continuously.
• Analyze and audit overall network security.
• Global network responsibilities –follow the sun.
• Engineer, design and implement best practices solutions for network connectivity and firewalled DMZ’s
• Provide connectivity solutions to internal customers – application developers and systems, analysts, other infrastructure team members, first line support teams
• Make recommendations to management regarding best practices for maintaining the network to meet business requirements.
• Internetworking with third party, etc.
• Ensure compliance with Corporate Security policies and procedures.
• Comply with network Corporate Change Control policies and procedures.
• Troubleshoot networks, proxy, f5, firewall, DNS, external vendor and internet connectivity issues.
• Firewall rule implementations and DMZ builds – internet and market data on Fortinet FortiGate appliances.
• Implement and support Arista product line - Catalyst switches, routers, etc.
• Implement and support routing protocols: BGP, OSPF, PIM, etc.
• Administer firewalls, f5 load balancers, and FortiGate Proxies
• Administering of network monitoring tools - Command, Stablenet, etc.
• Keep thorough and current network infrastructure documentation – Visio, etc.
• Off hours and weekend support required.
• 75% network administration – 15% firewall security – 10% voice support

Key Requirements (education, work experience, further qualifications)

• Excellent communication, interpersonal, organizational and documentation skills
• Good understanding of more advanced or recent routing and transport protocols at various levels of the OSI layer
• Current on networking and firewall trends in architecture and design
• Good working knowledge of UNIX (Solaris and Linux), Windows and telecom equipment.
• Understanding of VPN concepts, protocols and implementations
• Network experience with the Financial Industry’s unique requirements. Mark trends as well as firewall architectures
• Experience with Fortinet Fortigate firewalls.
• At least Arista Level (ACE-A / L1) or (L3) certification.
• Over 5 years of experience in a similar position