Network Security Engineer

NETWORK SECURITY ENGINEER

HRA JOB TITLE: Network Engineer

PROJECT DESCRIPTION: The NYC Department of Social Services / Human Resources Administration is initiating the Emergency Cybersecurity Project. Taking advantage of new technological capabilities will improve the speed and ease with which DSS/HRA can keep their Cyber infrastructure up to compliance and secured from modern threats and vulnerabilities.

DSS has a responsibility to the citizens of New York City (our clients) as well as our staff to secure and protect all personal, business, and confidential data hosted within as well as accessed through our IT systems. The Cloud services, Licenses, Automation, Support and Professional Services will bring DSS into Compliance with Modern Cyber Security standards and help keep the agency from frequent breakdowns and failures. This will help save money in the long run and keep the agency secure from ongoing threats.

Tasks & Duties

• Install, configure and support routing, switching and firewall infrastructure.
• Replace HW upgrade on switches: Required to install switch to the rack and cabling. Some remote site may need to run new cabling.
• Firewall upgrade: Install switch to the rack and cabling.
• Replace Riverbed App Response and Riverbed Steelhead.
• Add Bluecoat infrastructure.
  
  

Required Skills

• Minimum 7/8 Years Experience in network administration and management.
• Minimum 7/8 Years Extensive routing, switching and firewall experience supporting complex LAN/WAN security networks.
• Minimum 7/ 8 Years Experience with large IP switched/routed based networks and firewalls; Knowledge of IP addressing and subnetting (IPv4/6), routing protocols, including BGP, OSPF and MPLS.
• Minimum 7/8 Years Working knowledge of Virtual Private networks.
• Minimum 7/8 Years Advanced installation/troubleshooting experience of Palo Alto Firewall.
• Minimum 7/8 Years Advanced installation/troubleshooting experience of Juniper firewall/switch hardware/OS software.
• Minimum 7/8 Years Advanced installation/troubleshooting experience of Bluecoat internet Proxy servers.
• Minimum 7/8 Years Strong knowledge of VPN tunneling and telecommunication protocols.
• Minimum 7/8 Years Excellent understanding of Service Management environment including operations, processes, etc.
• Minimum 7/8 Years Ability to quickly assist teams in diagnosing network, application and system/server issues using common network tools and monitoring systems such as Network TAP, Wireshark, Riverbed Pilot/shark and Splunk.
• Minimum 7/8 Years Ability to prioritize work in a fast paced, high pressure environment including the resolution of escalated issues and events.
• Minimum 7/8 Years Understanding Linux/Unix, Windows operating system internals, including system security
• Minimum 7/8 Years Keep all documentation (including LAN/WAN drawings and equipment lists) accurate and current.
• Minimum 7/8 Years Knowledge of SIEM technology, Splunk
• Minimum 7/8 Years Develop authentication and authorization protocols, experience in NAC technology (802.1x).
• Minimum 7/8 Years Works independently and exercises reasonable discernment with little supervision while providing clear documentation of activities and accomplishments.
  
  

Desired Skills

• 6 Years knowledge of programming, such as Python, Shell; knowledge of Cloud networking and VoIP technology