Network Security Architect with Arista Certified (100% Remote)

Overview

Remote
Depends on Experience
Contract - W2
Contract - 6 Month(s)

Skills

CCIE
Palo Alto

Job Details

Must Have : Arista Certified Engineer (ACE) L3 certification is required.

 

Required:

  • Experience with architecture and design principles.
  • Experience in network and network security architecture, design, and documentation of medium-large scale enterprise networks (10,000+ users)
  • Experience with Cisco and Arista enterprise technologies, such as:
  • Layer2 LAN technologies (STP, VLANs, VTP, LACP)
  • High availability technologies (VPC, SVL, HSRP, VRRP, MLAG)
  • Routing protocols concepts (BGP, EIGRP, OSPF, MPBGP, VXLAN)
  • Experience in design and documentation of data center spine and leaf fabric (Arista/Cisco).
  • Experience with SDWAN technologies (Cisco, Palo Alto ION)
  • Experience with Secure Access Service Edge (SASE) technologies (Palo Alto Prisma Access)
  • Experience with Cisco wireless technologies in a large enterprise environment (Cisco WLC, FlexConnect, CAPWAP)
  • Experience with network security protocols, intrusion detection and prevention systems, secure socket layer (SSL) protocols, and virtual private networks (VPNs),
  • Experience with Network performance optimization, capacity planning and load balancing.
  • Ability to identify and understand issues, problems, and opportunities then compare data from different sources to draw conclusions.

Desirable

  • Experience with designingPalo Alto Centrally managed firewall platforms (NGFW Pan OS, Threat Prevention, UserID, Global Protect, and HA setup)
  • Experience with designing F5 Clusters, Load balancing, SSL decryption policies, DNS Geolocation (LTM, GTM, APM, ASM/Cloud WAF).
  • Experience with remote access VPN solutions (Global Protect, F5 BIG-IP Edge)
  • Experience with designing Network Access Control (NAC) solutions (Forescout/Cisco ISE)
  • Experience in designing secure and scalable network solutions for Cloud environments.
  • Familiarity with Certificate management (Venafi), Cryptographic protocols and algorithms, certificate PKI.
  • Familiarity with Infoblox DNS/IPAM functions.
  • Familiarity with Cloud computing principles.
  • Familiarity with Automation/scripting experience (Python, Ansible)
  • Familiarity with Network performance optimization, capacity planning and load balancing.
  • Familiarity with the following monitoring platforms: Microsoft SevOne, SolarWinds, DataDog, Splunk)
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.