Network Security Engineer- remote with light travel

Calance; Detroit (MI); Hybrid; USD 110,000 - 165,000; Full time

Job summary

Calance seeks a seasoned Network Engineer to oversee full lifecycle operations of our network security stack, including physical and virtual appliances such as firewalls, VPNs, and IPS/IDS. You will enforce security policies, assist in on-prem and Azure implementations, and lead cross-functional teams through complex projects.

Ideal candidates have 8 years of related experience, strong TCP/IP knowledge, and excellent communication skills.

Qualifications

• 8 years of professional experience in network security engineering.
• Strong TCP/IP networking knowledge from Layer 2 through Layer 7.
• Extensive experience with Palo Alto next-gen firewalls and firewall configuration.
• Experience with VPN and remote access configuration and support.
• Excellent verbal and written communication skills.

Responsibilities

• Full life cycle support and administration of network security appliances including firewalls, VPN concentrators, and IPS/IDS appliances.
• Enforce network security policies via firewall policy configurations and VPNs.
• Design and implement IT projects from a network security perspective (on-prem and Azure).
• Collaborate with Cybersecurity team during audits, compliance, and incident response.
• Act as technical lead to cross-functional teams for new business solutions.
• Develop network security architectures and documentation ( drawings, test plans, risk assessments).
• Evaluate costs and vendor options for large projects to ensure efficiency.
• Perform third level troubleshooting and service restoration for VPNs, firewalls, IDS/IPS, etc.
• Maintain detailed system configurations and incident/project documentation.
• Analyze problems and communicate status to management.

Skills

TCP/IP networks

Troubleshooting

Network security

Zero-trust networking

Education

Bachelor's degree in Computer Science

Tools

Palo Alto firewalls

Azure cloud

Skybox Firewall Assurance

SolarWinds Orion

Cisco routers & switches

Job description

Network Engineer

Responsibilities
Full life cycle support and administration of the organization s network security appliances, both physical and virtual, including but not exclusive to firewalls, VPN concentrators, and IPS/IDS appliances
Execution, validation and enforcement of the organization s Network Security and CyberSecurity policies in the form of firewall policy configurations, VPN creation, network access administration, and review of network device configurations such as routers, switches and wireless infrastructure
Assist in the design and implementation of IT projects from a network security perspective both on-prem and in Azure cloud
Cooperate with Cybersecurity team during audits, compliance activities and incident response
Act as technical lead to cross functional teams to drive the development of solutions in support of new business and application expansion
Develop and generate conceptual, logical, and physical network security architectures, resulting documents and drawings, testing analyses, test plans, and risk assessments to ensure sound architecture
Evaluate cost analysis and vendor comparisons for large scale projects to ensure cost-effective and efficient operations, and measures feasibility of various approaches
Assist with the planning, design, and implementation of new Information technology initiatives, working and collaborating with customers, vendors, and VARs to define requirements using BRD process, create RFI/RFPs, manage projects and communicate project status on the entire life cycle of the project
Perform third level troubleshooting and diagnosis for service restoration on all components within the infrastructure, including but not limited to VPNs, firewalls, IDS/IPS, and other network infrastructure
Maintain detailed documentation of systems, application configurations, and user profiles
Create task and procedure documentation, as well as communicate timely status on all relevant project information to appropriate personnel via incident tracking and project server (logging tasks and keeping all relevant information up to date)
Analyze problems and look for trends, always keeping management informed of problem areas

Required Education
Bachelor’s degree or equivalent years of experience required in Computer Science or Related Field

Required Skills & Experience
8 years of professional experience in a related field
Working knowledge and experience with TCP/IP networks from Layer 2 through Layer 7, from IP addressing and naming (DHCP, DNS, subnetting, VLAN) through security, along with related software tools for monitoring and management
Strong troubleshooting and technical diagnostic skills with the ability to clearly isolate and define problems, taking steps to resolve them before they become larger and more critical.
The ability to make quick, realistic, practical decisions in urgent situations
Extensive experience with Palo Alto next-gen firewalls and firewall configuration; understanding and familiarity with IPS devices and policy implementation
Experience with VPN and remote access configuration and support
Network troubleshooting experience which includes packet trace and Sniffer analysis as well as router & switch security configuration analysis (ssh, SNMPv3, access control lists, TACACS/RADIUS, etc.). Experience with wireless network security standards and configuration
Understanding of Internet routing, defense in depth, DMZ design and zero-trust networking
Security experience as it applies to compliance, protection of assets, and company security
Excellent verbal and written communication skills, including the ability to deliver presentations and convey technical and design strategies to different audiences
Strong interpersonal skills with the ability to deal with stressful situations involving equipment and application failures in a composed and constructive manner
Dependable, accessible after hours in the event of a system failure, work as needed to maintain equipment in off-hours
Able to collaborate and comfortable working remotely with team-members and leaders

Preferred Skills & Experience
Working knowledge and experience with Azure cloud preferred; multi cloud experience desired
Experience with Skybox Firewall Assurance or other firewall audit tools preferred
Experience with Solarwinds Orion, or other network management tools preferred
Configuration and troubleshooting experience in a LAN/WAN environment with Cisco routers, switches, and Palo Alto firewalls preferred