Cloud Network Security Engineer

Job Title: Sr Network Engineer

Location: Chicago IL / Dallas TX (3 days Hybrid)

Duration: 12 months

Job Description:

This role is responsible for:

• Network policy governance and compliance
• Supporting administrating and overseeing network support
• Design and analysis of new and existing architecture
• Routing/switching configuration design and compliance
• Network related business continuity approaches
• Develop systems specifications technical/procedural implementation plans
• Coordinating complex projects with clients and vendors.
• Works with a team performing network design and support of new network and security architectures for on premise and Cloud networks.

Primary Duties and Responsibilities:

• Oversee the full lifecycle of network infrastructure including the design deployment support compliance and documentation of routing switching firewalls and cloud-base solutions.
• Lead and coordinate network changes ensuring security performance and compliance with governance framework (NIST-CSF COBIT).
• Collaborate with vendors carriers and engineering teams to resolve complex issues and drive large-scale project to completion.
• Provide strategic direction for network planning maintaining up-to-date documentation and deliver on-call operational support to ensure reliability and business continuity.
• Lead and coordinate the development implementation and management of policies procedures and controls.
• Create and manage Risk Intakes/Acceptance(s) when required.
• Lead and support Vulnerability Management efforts.
• Proactively maintain awareness of policy and procedure changes that could affect networks compliance.
• Work with and manage requests for documentation from Auditors or Exams.
• Maintain an accurate inventory of Business Applications and Devices in Service-now.
• Create update and validate Configuration Baselines for Network applications and equipment.
• Perform consistent compliance Audit/validations throughout the network.
• Lead remediation efforts related to findings and observations in areas of responsibility. Ensure remediation addresses root cause improves client s residual risk and is completed in a timely manner

Qualifications:

• Excellent presentation skills including planning material preparation and public speaking
• Demonstrated capability to tailor communications to the technical level of the audience
• Clear concise and precise written and verbal communication skills to effectively communicate with people of various backgrounds
• Strong interpersonal leadership project management and mentoring skills
• Strong ability to use solution-oriented approach towards problem resolution
• Ability to work independently and be a team player

Technical Skills:

• Experience working in and developing solutions for a highly regulated environment or organization that leverages a security framework (such as NIST COBIT etc)
• Experience directing use of tools such as Ansible Terraform Jenkins Python and Github (or industry equivalent)
• Experience delivering Infrastructure as code
• Experience building cloud infrastructure in environments such as AWS (Preferred) Azure or Google Cloud or similar service
• Knowledge of Controls Risk Ranking/mapping Remediation items and general IT audit
• Understanding of NIST Special Publication 800-53 (Rev. 4) and COBIT framework
• Advanced experience with architecting designing deploying and operating network elements such as DNS/IPAM; Firewalls; Network Access Control Solutions (NAC); load balancing; DDoS mitigation tapping/sniffing infrastructures; and NTP

• Experience with Cisco IOS/NX-OS configurations
• Experience with GRC Technologies such as Archer
• Experience with CIS Benchmarks

Education and/or Experience:

• Bachelor s degree preferably in a technical discipline (Computer Science Mathematics etc.) or equivalent combination of education and experience.
• 5 years of experience in IT systems installation operations administration and maintenance of virtualized servers / cloud systems

Certificates or Licenses:

• Relevant industry certifications such as Microsoft Azure or Google Cloud
• Cisco Certified Network Professional (CCNP or CCDP) equivalent field experience
• AWS certifications such as DevOps Engineer Solutions Architect Advanced Networking or Security or equivalent field experience
• Cisco Certified Internetwork Engineer (CCIE) Certification