Senior Network Security Engineer - Bethesda, United Kingdom - TekWissen LLC

Description

Overview: TekWissen Group is a workforce managementprovider throughout the USA and many other countries in the world.Our client is a global operator franchisor and licensor of hotelresidential and timeshare properties. The company is primarilyfocused on management franchising and licensing of its lodgingproperties. It also occasionally develops acquires or renovateshotel and residential properties directly and through partnershipsjoint ventures and other business structures with third parties. Position: SeniorNetwork Security Engineer Location: Bethesda MD 20814 Duration: 3 Months Job Type: Contract Work Type: Remote Job Description

• Strong Hands on Experience on Cisco ISE(Onprem and Cloud) and Firemon tools.
• Strong Hands on Aruba Clear Pass Cisco MerakiSolution
• Good tohave Forescout NAC knowledge.

JOB SUMMARY

• The Senior Network Security Engineer NetworkSite Reliability Engineering (SRE) is the subject matter expert indesigning and implementing the Network security strategy andplatforms for the nextgen operations for all Client networksincluding the Property Networks Datacenter/Cloud Networks andCorporate Networks.
• This role will work closely and collaboratively with amatrix team of expert network architects and engineers to driveadoption of DevOps/SRE practices and operating models across allnetwork product towers and around globe.
• The Sr Security Engineer brings a strongperspective that inspires change and motivates engineers to developsimple solutions to complex problems driving the engineering andoperations for network software development automation provisioningperformance management and tools / APIs for selfservice across theglobe.
• This role isaccountable for establishing technical level relationships andpartnering with all business disciplines other MI teams outsourcingvendors and external suppliers to define and implement the NetworkDevOps / SRE roadmap building and enforcing the standards definedin it.
• This positionwill also serve as lead to define and support service delivery andoperational support standards for our Next Generation Operationspartnering with the global technology peer teams to meet servicelevel requirements and resolve service delivery issues across theportfolio.
• Reportingto the Senior Director of Global Network DevOps/SRE this keyposition is accountable to ensure overall requirements by customersand peer delivery and operations groups are met.
• Accountabilities include but arenot limited to continental IT executives property LAN serviceproviders (LSPs) enduser computing services delivery hostingservices enterprise availability server storage virtualizationinclusive of security/privacy risk management and disaster andcrisis management.
• The successful candidate will provide Architectureleadership for all phases of the infrastructure lifecycle fromideation through execution and ongoing management and support withspecific attention to identifying opportunities for proactive andreactive (selfhealing) automation solutions across the network.
• (S)/He will developand execute new initiatives to simplify standardize optimize andautomate the network designs tooling and operations to reduceimplementation cycle times eliminate service downtime optimizeperformance and ensure that all security and compliancerequirements are fully governed.

Educationand Experience Required:

• Undergraduate degree in an engineering orcomputer science discipline and/or equivalentexperience/certification
• 7 years experience in information technology including 5years experience in the implementation of WAN LAN and datacenternetworks with a focus on mission critical customerfacingapplications and services
• Strong Handson knowledge in installing configuring andtroubleshooting of Cisco ISE
• Strong Handson knowledge in Firewall management solutionlike Firemon
• Extensive experience with security or security relatedproducts
• Mustpossess expertise in enterprisewide design and administration ofdevices and policies in the security tools above
• Advanced knowledge of leveragingthe orchestration APIs for developing scripts
• Help develop document and managethe requirements gathering process and provide detailed design andbusiness processes to support the requirements throughout theproject life cycle
• Knowledge and experience in firewalls network managementwired and wireless network peripherals in supporting securityproducts like Firemon and Cisco ISE
• Advanced knowledge of AAA RADIUS and TACACSprotocols performing packet captures and analysis
• Experience of policy developmentcertificate provisioning in Firemon and Cisco ISE products a plus
• Perform networktroubleshooting and upgrades. Coordinate with local teams andvendors problem solve and restore services as needed.
• Familiarity with multiplelanguages including C Java Python Perl or another programminglanguage
• Experienceimplementing solutions using API Management Platforms.
• Field experience and knowledge ofdata networking and IP technologies including DHCP DNS NAT RemoteAccess VPN
• Experience with managing security tools in a hospitalityindustry a plus
• Mustbe able to collaborate and work with cross functional teams inmultiple time zones
• CCIE or CCNP certifications or on the path to thesecertifications. CCNA is acceptable as well.
• Experience in Agile methodologiesdaily standup meetings sprint planning sessions and user storypreparations
• Experience with firewalls and firewall management toolshighly desirable
• Technical knowledge common routing protocols (e.g. OSPFBGP) IPv6 VPN etc. across a global distributed network
• Handson experience with commonrouting and switching platforms (Cisco Juniper HP/Aruba etc.)
• Handson experiencedesigning configuring and operating highspeed campus / office /property networks
• Demonstrated experience in delivering written documentsdetailing network solutions and diagrams
• Knowledgeable in modern configurationmanagement tools (Ansible Chef Fabric etc.)
• Experience with Cloud Computingplatforms (e.g. Amazon AWS Microsoft Azure Google Compute Engine)
• Technical knowledgein Load Balancing such as ELBs NLBs F5 BIGIP

Preferred:

• Advanced Degree (e.g.MS PhD) in Computer Science or other technical discipline or MBApreferably with a focus on technology
• Handson Working knowledge of PKI 802.1X802.11x DNS DHCP SNMP and VPN
• Technical knowledge in networking (Cisco and nonCisco)with an emphasis on softwaredefined networks (SDN) and leveragingspine & leaf designs load balancing firewalls security design(intrusion detection and prevention) DNS NTP Network Tools &Management
• Experience in researching emerging technologies andtrends standards and products and synthesizing into cleartechnology roadmaps and strategies
• Strong knowledge of emerging tools softwareapplications and systems for attaining bestinclass IT technologyacross the enterprise
• Excellent problemsolving skills working independentlyand through leading outcomes for cross functional teams
• Excellentunderstanding of change management testing requirements techniquesand tools to ensure high availability of platforms
• Strong attention to detail withan ability to operate effectively across multiple priorities
• Ability to performindependently as a member of a team and through cross functionalinitiatives
• Proventrack record of driving transformation in network technologiestools and processes through a data driven continuous improvementmethodology
• Demonstrated experience in improving security stabilityreliability performance and agility of complex enterprise networks
• Strong technicalknowledge of foundational networking technologies and solidunderstanding of the software defined networking (SDN) ecosystem
• Strong understandingof network infrastructure automation instrumentation and monitoringplatforms and the emerging technologies in this area
• Proven experience leading highlyeffective technical teams through major technology andorganizational change
• Proven experience driving operational performancethrough defining and enforcing Recovery Time Objective (RTO) andRecovery Point Objective (RPO) Service Level Agreements (SLAs)
• Certification innetwork and/or security technologies (e.g. FSCA FSAA FSCE CCIE CCNPCISSP etc.)
• Stronginfluencing skills and an ability to overcome barriers whiledriving change
• Excellent verbal and written communication skills for awide range of audiences including executives business stakeholdersand IT teams

TekWissen Group is anequal opportunity employer supporting workforce diversity.