Employer Active
NG911 FDNY Security Engineer
On Site
Work Location: 9 MetroTech Brooklyn NY 11201
MondayFriday 35 hours/week
Start Date:05/27/2024
End Date:05/25/2025
Rate: DOE
Job Description
12 years of experience
SCOPE OF SERVICES
TASKS: NG911 FDNY Security Engineer
Participate in the implementation of security controls in a Public Safety ESINET and NENA compliant NG911 system.
Ensure the security controls are adequate for all Public Safety Answering points (PSAPs) in the commission of the 911 program at PSAP.
Develop security configurations.
Establish security best practices as well as review all vendor designs ensuring compliance with security standards and governance models established by the City of New York.
Provide expertise in integration and engineering of Security platforms.
Manage test cases and identify risks associated with system integrations
Work with vendors to integrate security platforms into Public Safety infrastructure
Architect security controls.
Assess Active Directory security roles and policies
Configure IDS/IPS security policies
Troubleshoot level 3 security related issues.
Configure security policies in DNS
Examine current firewall policies and ensure completeness and accuracy
Lead resolution of security incidents
MANDATORY SKILLS/EXPERIENCE
Minimum of 12 years Security Engineering experience MWBE Professional IT Services
Strong network security experience
Strong project management experience
Must be able to lead projects
Any compliance experience specifically HIPAA is highly desirable
Bachelors degree in computer science information technology or related field.
Should be able to utilize security frameworks like NIST and MITRE.
Strong knowledge of security management tools to facilitate troubleshooting i.e. Wireshark Net brain Extra hop Net witness etc.
Strong Identity and Access Management background
Experience with configuring DNS
Strong experience in performing security risk assessments
Understanding of the various VPN technologies
Knowledge of resilient designs to ensure high availability
Knowledge of IPS/IDS design as standalone hardware or as a feature within firewalls
Ability to create reports using KRI and KPI
Experience with Next Generation Firewalls including Palo alto Fortinet Forcepoint etc.
Work with vendors carriers and other technical groups to implement new security controls and troubleshoot existing controls.
DESIRABLE SKILLS/EXPERIENCE:
Understanding of SIP security design and implementation for Voice/Video and Data.
Understanding for firewall policies and application security
Experience in auditing/assessing data network security design.
Experience in auditing/assessing applications security design.
Full Time