Senior Network Security Engineer

Optima Global Solutions Inc.; New York (NY); On-site; USD 145,000 - 176,000; Full time

Job summary

An established industry player is seeking a Senior Network Security Engineer to enhance their cybersecurity framework. This role involves evaluating and migrating configurations for Ivanti Connect Secure, ensuring robust authentication setups, and working closely with client teams for seamless integration. You'll leverage your extensive experience in networking protocols and security concepts to drive improvements and document processes. Join a dynamic team that values innovation and collaboration, and make a significant impact on the security landscape.

Qualifications

• Minimum of 7 years of experience in Cybersecurity focusing on Ivanti SSL VPN.
• Hands-on experience with Ivanti Pulse Secure and Connect Secure products.

Responsibilities

• Conduct assessments and setup for authentication configurations.
• Develop migration plans and execute data and configuration migration.

Skills

Ivanti SSL VPN

Networking protocols

Security concepts (firewalls, VPNs, encryption)

Active Directory

Next-Generation Firewalling technologies

Education

Bachelor's degree in Computer Science or related field

Tools

Ivanti Connect Secure

Appliance ISA

PSA

VM

Job description

Optima Global Solutions Inc.is a valuable IT Services and Solution provider that customers, employees, and stakeholders feel proud to be associated with. Optima's Intelligent Automation Solutions leverage robotic process automation, intelligent data capture, and business process management best practices to streamline operations. Our IT Services practice provides organizations with highly personalized, comprehensive, U.S. based recruiting services supported by our internal onsite team of subject matter experts.

Currently, we are hiring for the following position;

Ivanti Connect Secure Consultant

Project Description: Our client, CUNY requires a Senior Network Security Engineer consultant to assist with configuration, evaluating existing config and migration of configuration including authentication services, user realms and profiles, from old appliance to new appliance.

The project also includes the implementation of multiple domain authentication and validation of the configurations against a new domain authentication structure.

Job Title Requirements: CUNY will evaluate all candidates with a minimum of 84 months/ (7) years' experience.

Skill Level: Senior/Expert (7) years Cybersecurity Experience in Ivanti SSL VPN solution.

Typical Software Used for Engagement: Ivanti Connect Secure and Client

Typical Hardware Used for Engagement: Appliance ISA, PSA, VM

Mandatory Qualifications:

• Possesses a minimum of five years (60 months) of handson experience with Ivanti Pulse Secure and Ivanti Connect Secure products.
• Demonstrates a strong understanding of Networking protocols, including but not limited to and Security concepts such as firewalls, VPNs, encryption, and Authentication protocols (LDAP, SAML, RADIUS, MFA).
• Has practical experience with Next-Generation Firewalling technologies.
• Possesses a strong working knowledge of utilizing Active Directory for authentication, authorization, and resource access within the context of Ivanti Connect Secure.
  
  

Duties/Responsibilities: Core Responsibilities and Essential Duties:

• Assessment
• Authentication Setup Assessment:
• Inventory all user realms, profiles, and configurations on the PSA devices.
• Assess the compatibility of current configurations with the new ISA platform and the new domain authentication structure.
• New Domain Authentication Assessment:
• Review the architecture and configuration of the new domain environment.
• Identify potential integration challenges and ensure readiness for authentication migration.
• Planning
• Migration and Testing Plan:
• Develop a comprehensive migration plan for user realms and profiles, incorporating testing against the new domain environment.
• Define prerequisites for integration, including trust relationships, certificates, and access control configurations.
• Establish rollback procedures to address any migration or authentication issues.
• Pre-Migration Preparation:
• Prepare ISA devices to receive migrated configurations and support the new domain authentication structure.
• Coordinate with client teams to align schedules and test periods.
• Migration Execution
• Data and Configuration Migration:
• Extract user realms, profiles, and authentication settings from the PSA devices. o Transform and adapt extracted data for compatibility with ISA devices and the new domain environment.
• Load configurations onto ISA devices in a phased manner.
• Domain Authentication Configuration:
• Enable and configure multiple domain authentication on ISA devices.
• Integrate and validate authentication protocols (SAML, Kerberos, LDAP) with the new domain structure.
• Validation and Testing
• Functional Testing:
• Test authentication workflows for all user realms and profiles against the new domain authentication structure.
• Validate user access for each domain, ensuring no disruptions or policy violations.
• Failover Testing:
• Test failover and redundancy scenarios to confirm system reliability.
• New Domain Compatibility Testing:
• Verify that the migrated configurations work seamlessly within the new domain authentication setup.
• Address and resolve any compatibility or integration issues.
• Documentation and Knowledge Transfer:
• Document all migration procedures, challenges, and resolutions.
• Provide knowledge transfer to CUNY staff through detailed documentation and live demonstrations.
• Collaboration and Support:
• Work closely with CUNY's teams, including networking, application, and support teams, to troubleshoot issues and ensure smooth integration.
  
  

Essential duties:

Key responsibilities include, but are not limited to:

• Provision Access for SSL VPN Users
• Configure Authentication Servers
• Create, configure and map Role and Realm and Resources
• Document all changes
• Create method of procedures
• Workday provisioning/ mapping Auth server/ mapping or creating roles and realms / troubleshooting as needed
• Other duties as assigned.
  
  

Assessment

• Create a Current State Report
• Complete Ivanti Pulse Secure environment assessments
• Review Remote Access architecture
• Complete configuration and security assessment of all devices
• Understand and document bandwidth utilization and inventory
• Identify all issues in all layers of the architecture
  
  

Recommendations

• Authentication requirements
• Areas to create redundancy
• Hardening of the network
• Areas to upgrade technology
• Estimated cost of the upgrades
• Opportunities for cost avoidance
• Value adds for the upgrades
  
  

Create Future State Report

• Future State Architecture map
• Future state for management of devices.
• Network and scalability projections
• Lifecycle of the future state network security upgrades
• Anticipated next gen technology.
  
  

Interested candidates, please apply online with a detailed resume and contact information.

Thank you.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Other

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Optima Global Solutions Inc. by 2x

Get notified about new Senior Network Security Engineer jobs in New York, NY.

Sr. Network Security Engineer, Vice President

Jersey City, NJ $145,000.00-$176,000.00 8 months ago

Senior Security Engineer, Incident Responder

New York City Metropolitan Area 2 weeks ago

Senior/ Staff Security Engineer, Detection and Response

Senior Security Engineer, Brokerage & Money

Sr OT Network Engineer (Operational Technology)

New York, NY $120,000.00-$150,000.00 4 days ago

Network Security Engineer -Middletown, NJ Onsite, 2nd Shift

CISO- Network Security Engineer SME --Security Connectivity

Network and Cyber Security Engineer for the Division of HPD Tech

New York, NY $96,086.00-$110,499.00 1 month ago

Vice President – Network Security Engineer

Jersey City, NJ $115,000.00-$195,000.00 3 weeks ago

Fort Lee, NJ $180,000.00-$230,000.00 1 week ago

New York, NY $120,000.00-$155,000.00 2 weeks ago

New York City Metropolitan Area 1 week ago

Network Security Engineer with Ivanti Experience

Network Security Engineer, AVP - Blackstone Technology & Innovations

NMC_000295 - Sr. Network Security Engineer / Architect (W2 / Independent C2C)

Newark, NJ $174,358.08-$251,850.56 6 months ago

New York, NY $174,358.08-$251,850.56 6 months ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.