Senior Network Security Engineer Details | Black & Veatch Family of Companies

Senior Network Security Engineer

Location:

Cary, NC, US Overland Park, KS, US

Company:
Black & Veatch Family of Companies

Together, we own our company, our future, and our shared success. As an employee-owned company, our people are Black & Veatch. We put them at the center of everything we do and empower them to grow, explore new possibilities and use their diverse talents and perspectives to solve humanity's biggest challenges in an ever-evolving world. With over 100 years of innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a world of difference.

Black & Veatch allows you to lend your talent and perspective to humanity's biggest challenges in a flexible environment where you are empowered to grow and explore new possibilities. We offer competitive compensation; 401K match and benefits that start day 1.

Our hybrid environment allows you to balance your work and personal life. At Black & Veatch, you own your career with purpose and meaning. You are empowered to grow and explore new possibilities at every step of your career journey. Bring your big ideas knowing you are safe to be who you are and speak up with concerns or questions and put your diverse talents and perspectives to use.

As the Sr. Network Security Engineer, you will have the opportunity to:

• Serve as a technical network security engineer, configuring, monitoring, and maintaining security standards on next-generation firewalls and security service edge solutions
• Ensure traffic is segmented, inspected, and managed per policy and business needs
• Be network security lead for offshore engineering staff in troubleshooting, daily tasks, and change oversight

Black & Veatch's Business Enablement consists of critical groups that help enable the organizations people, projects, and businesses to be as successful as possible. Functions in this group include Digital & Information Technology, Global Finance, Global Human Resources, Legal, Risk Management, and Government Affairs and Real Estate and Building Services.

Configure, administer, and maintain all network security hardware/software, monitoring tools, and security management portals

Install, configure, and maintain complex multi-site VPN & TCP/IP networks

Develop, recommend, and implement new and updated procedures together with key stakeholders to ensure an effective, streamlined, secure, and scalable operation and solution

Maintain access to services such as applications, servers, routers, and related software and hardware via VPN

Troubleshoot and resolve network performance problems

Monitor and troubleshoot firewalls, logs, and connectivity issues

Develop and support network automation and maintenance scripts

Network firewall capacity planning

Assists with the planning and implementation of the overall VoIP Connectivity solution.

Proactively engages peers to understand key metrics for the business.

Proactively researches and identifies new products and technologies that align with the strategic vision of the organization.

Proactively seeks out educational opportunities to ensure long-term growth for this position. Stay abreast of current and future industry trends related to network firewall technologies and application toolsets.

Bachelor's degree in information Security/Computer Science/Electronics and Engineering/Information Technology preferred or any other degree. Or, equivalent 8+years' experience or specialized training in lieu of degree.

All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.

Degree in Computer Science, Business Administration or related discipline

8+ years' hands-on experience working in heterogeneous TCP/IP intensive environments

Strong understanding of security architecture & protocols, SASE/SSE solutions, VPNs, NAT, SSL/TLS, and IPSec

Experience with network troubleshooting, capacity planning, performance tuning, firewall security design, and security best practices

Demonstrate a high-level hands-on experience of working directly with each of the following:

• Palo Alto (plus Panorama/Prisma Access)
• Cisco Security (ASA, ISE, Firepower NGFW)
• Cisco Secure Client/Any Connect
• Security Secure Edge (SSE) Solutions (Zscaler/Prisma Access/Cisco Secure Client)
• Network Monitoring and Management

Demonstrate general hands-on experience working with each of the following:

• Network routing protocols (BGP/OSPF)
• Cisco Data Center Networking
• F5 Load Balancing

High level of independent thinking and the ability to solve problems in a fast-paced environment

Ability to engage in deep system level problem determination and resolution

Must be able to work well within a technical team, as well as interface well with the outside business units…