Network Security Engineer

Job Title: Network Security Engineer

Job Location: Annapolis, MD | 3 days onsite/week

Description:

AgreeYa is a global Systems Integrator and is seeking an experienced Network Security Engineer to join our growing team. In this role, you will design, implement, and support secure network infrastructures, monitor and mitigate security threats, and ensure the confidentiality, integrity, and availability of enterprise systems across complex environments.

Job Responsibilities:

• Performing project-based engineering, design, installation and troubleshooting of data security networks.
• Providing assessment, design and implementation services of data and secure networking environments.
• Developing comprehensive graphical and text-based design documentation and effectively managing the implementation process from design to acceptance.
• Assisting internal groups through capacity planning, maintaining, monitoring and review of secure data communications networks.

Active certifications as follows:

• Palo Alto Networks Certified Network Security Administrator (PCNSA) Certification or Palo Alto Networks Network Security Professional Certification.
• Cisco Certified Network Associate (CCNA) Enterprise or (CCNA) Security Certification.
• Certifications that are currently active or expired within three (3) years of proposal submission as follows:
• Palo Alto Networks Certified Network Security Engineer (PCNSE) Certification or Palo Alto Networks Next-Generation Firewall Engineer Certification or Palo Alto Networks Network Security Analyst Certification.

Required Skills & Experience:

• Ten (10) years of technical experience in IT networking and network security.
• Cisco Certified Network Professional (CCNP) Enterprise or (CCNP) Security Certification.
• Leading migrations or assisting a team of engineers who will migrate traditional/legacy network security platforms to current/next generation technologies and expose customers to the full life cycle of defense in depth solutions.
• Assisting network engineers in troubleshooting critical problems or threat remediation relating to network security products.
• Working with the engineering team to successfully implement configuration guidelines, change management, and standard operating procedures for secure network solutions.
• Leading, scheduling, providing guidance and coordinating the activities with other team members to resolve end user problems in a timely and accurate fashion.
• Generating weekly status reports including project progress, key milestones, and tasks accomplished.
• Hosting weekly status meetings/calls with team or on as needed basis
• Five (5) years of experience with:
• Palo Alto Networks next generation firewall services.
• Intrusion Detection and Prevention with Palo Alto networks.
• Content Filtering Palo Alto networks.
• Virtual Private Networks using Palo Alto network systems.
• Data Loss Prevention
• TLS/SSL Inspection
• Four (4) years of experience in Complex switching, routing, wireless with Cisco Systems.
• Three (3) years of experience in Reverse Proxies, Load Balancing with A10 networks.
• Two (2) years of experience in Network Access Control - Cisco Identity Services Engine (ISE), Free Radius, and Access Control Lists (ACLs).
• General experience with the following:
• Ability to work independently, troubleshoot and provide mentoring to junior associates.
• Ability to Communicate effectively when providing presentations.
• Ability to Produce technical documents (diagrams, design documents, project plans and schedules, and user instructions) as required.

Education Required:

• Associate s degree in an Information Technology (IT) related field, as determined by the AOC.

Skills, Experience, & Capabilities

• Implementing multifactor authentication solutions with Microsoft.
• Cloud based virtual networking and security services
• Authentication standards - (802.1x) in wired and wireless applications.
• Scalable routing protocols Enhance Interior Gateway Routing Protocol (EIGRP), Open Shortest Path Fist (OSPF), and Border Gateway Protocol (BGP).
• Enterprise Data Center implementing Micro segmentation.
• Certificate Management, Public Key Infrastructure (PKI).
• Vulnerability management using Nessus, NMAP, Windows, Unix, and Linux OS
• Packet/Protocol Analysis using Opnet, Riverbed, Wireshark, and taps.
• Centralized Management using Panorama, SolarWinds.

AgreeYa is a global systems integrator delivering competitive advantage for its customers through software, solutions, and services. Established in 1999, AgreeYa is headquartered in Folsom, California, with a global footprint and a team of more than 2,200 staff across offices. AgreeYa works with 500+ organizations ranging from Fortune 100 firms to small and large businesses across industries such as Telecom, Banking, Financial Services & Insurance, Healthcare, Utility & Energy, Technology, Public sector, Pharma & Biotech, and others.

AgreeYa is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, gender identity, sexual orientation, national origin, disability, veteran status or other protected characteristics.