Network Security Engineer # JN -062019-47144

Liverpool, NY

Posted: 06/11/2019 Industry: Admin/Networking/System Engineer Job Number: JN -062019-47144
About the Position:
  • Critical National Infrastructure (CNI) department provides IT support services for the critical applications that drive the company s operations. The Energy Management Systems (EMS) Network Engineer role is responsible for supporting the overall operation of mission critical systems
  • Responsibilities include the design, implementation, and maintenance of internal CNI networks, specifically the switches, routers, load balancers, and firewalls. Normal operational responsibilities include system monitoring, device configuration changes, patching, testing, documentation and troubleshooting of network devices at multiple locations
  • This position is also responsible for ensuring that proper security controls are deployed to comply with NERC CIP and corporate security standards, including support of external security reviews. The position will work closely with the application support teams to ensure functional requirements are satisfied and high availability is achieved. It is a requirement that supporting the Energy Management Systems (EMS) will include off hours support as part of an on-call rotation. The candidate must possess excellent interpersonal, oral and written communication skills and teamwork

Position Responsibilities (including but not limited to):
  • Network Engineer roles
    • Self-motivated individual
    • Participate in projects while meeting critical deadlines
    • Ensure that configuration and change management processes are documented accurately
    • Respond to all major incidents
  • Maintenance of network equipment, switches, routers, firewalls, load balancers and supporting hardware (including applications)
  • Create new server and system environments as needed, including designing, completing system installation, documenting and enforcing system standards
  • Optimize system performance by monitoring, troubleshooting issues, and scheduling upgrades to maintain a secure and reliable environment
  • Secure mission critical systems by establishing policies, enforcing policies and monitoring access
  • Implement changes to stage, test, development, and production to allow applications and services to access devices
  • Ensure device logging is active and forwarding properly to the appropriate repository
  • Interact with internal and external stakeholders to resolve issues by troubleshooting and utilizing creative problem solving skills
  • Ability to work both independently as well as in a team environment
  • Local travel is required, as needed, to support the CNI environments
  • Participate in an on-call rotation, providing after-hours and storm support when required

Knowledge & Experience Required:
  • Position requires a Bachelor' s Degree in Computer Science/Engineering and/or 5+ years of relevant experience
  • Understanding of LAN/WAN networking concepts, topologies and protocols
  • Competency with network systems security, information security concepts and technologies
  • Working knowledge of Windows/Active Directory
  • Must possess strong writing, verbal communication, documentation skills and communicate with a sense of urgency
  • Ability to work with a variety of personnel and be conversant with both technical and business-oriented personnel
  • Ability to articulate how people, process and technology, collectively, are essential in establishing and executing a NERC CIP compliance strategy
  • Competency with network security and information security concepts and technologies
  • Ability to meet pressured deadlines, time constraints and periodic requirements
  • Demonstrated ability to develop long-range program plans, set goals, objectives, decisions on program priorities and analyze program effectiveness
  • Willingness to accept accountability on complex scenarios and find constructive solutions

Familiarity with the following is desirable:
  • Incident Response
  • Patch Management
  • Software tools such as Solar Winds, Kiwi, Sourcefire, Tripwire, Nessus, Skybox, and Lancope products
  • Disaster Recovery Planning
  • Industry Standards for Process Control Security
  • Secure Network Architecture
  • Knowledge of the NERC CIP 001 014 Cyber Security Standards and requirements
  • Knowledge of Windows and Linux Operating Systems
  • Cisco Routers, Switches (Layer 2 and 3), Security Appliances (ISE/TACACS) and Intrusion Protection Systems (IDS/IPS), F5 Load Balancers
  • Checkpoint Firewalls and Firewall Management
  • Experience with multiple routing protocols (EIGRP, OSPF, BGP)
  • Highly resilient network topologies
Apply Online

Send an email reminder to:

Share This Job:

Related Jobs:

Login to save this search and get notified of similar positions.