Network Security Engineer

TEKsystems
$55.00 - $65.00 / hr
United States, Ohio, Columbus
Sep 09, 2024
Top Skills' Details 1. Palo Firewall security policy (URL filtering, app-ID, decryption, build / design firewalls) 2. Understanding of segmentation tools like Cisco Trustsec, Forescout, Clearpass, Elisity, Cisco ISE 802.1x 3. Automation and scripting in at least 1 language (YAML/Jinja, Python) Description: REQ Qual Notes: Must Have Skills: 1.Palo Firewall security policy (URL filtering, app-ID, decryption, build / design firewalls) 2.Understanding of segmentation tools like Cisco Trustsec, Forescout, Clearpass, Elisity, Cisco ISE 802.1x 3.Automation and scripting in at least 1 language (YAML/Jinja, Python) Upcoming Project: tunnel designs for quantum resistance, IoT segmentation. Hybrid in Columbus and would sit on-site 3 days and remote 2 days Target Salary: 117K plus bonus incentive plan of 15% target. Full Huntington benefits upon conversion. Job Description: Brief Description The Network Engineer III is a member of the Infrastructure Security Services Team supporting Huntington's Enterprise Network Organization. This team is responsible for all research, project design, and initial implementation of security technologies as well as ongoing configuration and environment standards. This team also provides subject matter expertise support during incidents. This role specifically will focus on network security technologies related to network access control (NAC) and firewall infrastructure deployed in alignment to zero-trust principles and industry standard like PCI, SOX and CIS. Detailed Description: This role will primarily be focused on firewall security policy design and implementation utilizing Palo Alto Firewalls and Panorama. Expertise in Network Access Control (NAC) and Segmentation solutions such as Cisco ISE, Elisity, Forescout or Fortinet. Background and knowledge of IPSec/SSL remote access technologies including management of policy, client authentication, and infrastructure support required. Build and enhance network security solutions with a "secure and automate first mindset". Leverage Infrastructure as Code (IaC) concepts to manage configuration baselines via Jinja2/YAML and GIT. Participate in an on-call rotation. Basic Qualifications: 3+ years of hands-on large scale Enterprise network deployment and configuration. 3+ years of hands-on Palo Alto Panorama (configuration and maintenance) 3+ years of hand-on experience in Network Access Control (802.1x and TrustSec/SGT). Bachelor's Degree in IT field of study or 5+ years of experience. Financial Services experience a plus. Ability to execute on IT project initiatives with minimal oversight. Ability to work both as a team and independently to accomplish goals. Security subject matter expert with strong ability to partner with Information Security organizations and Business Units. Strong communication skills (both verbal and written) with ability to create runbook documentation and operational/implementation turn-over support of new technologies. Preferred Skillset: Current Palo Alto PCNSE Certification Expertise in Network Access Control policy and solutions, preferably with Cisco Identity Services Engineer (ISE). Experience with Cisco ASA or Firepower firewalls support Cisco remote access solutions. Evaluate, design, implement, operate, and maintain Palo Alto Panorama and Firewalls. Knowledge and experience using or deploying Secure Access Service Edge (SASE) technology such as iBoss, zScaler, or Palo Alto. Expertise in Palo Alto URL Filtering, AppID and decryption. Expertise in Palo Alto Panorama Templates. Strong design skills of data center and DMZ design. Experience with security policy enforcement and firewall deployments in public/private cloud environments. Perform risk assessments on IT products and services and make appropriate recommendations. Experience in scripting/automation methodologies (Python, Ansible, Bash) Experience with Service Now Change Control Other Skillsets of Interest: Risk and vulnerability analysis Network IoT/OT segmentation practices and solutions. NIST Zero Trust Architecture, SOX, PCI, SOC2 Skills: Paloalto, Network security, Cisco, Segmentation, Automation Top Skills Details: Paloalto,Network security,Cisco,Segmentation,Automation Additional Skills & Qualifications: Experience Level: Expert Level About TEKsystems: We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.