Senior Network Engineer

About MCU

At Municipal Credit Union, we believe that an incredible culture helps create a happy and motivated team that works hard to achieve the best results for themselves and their members. For more than 100 years, MCU has provided affordable financial products and convenient services to a membership base that is now comprised of over 600,000 individuals. With each new generation we have the pleasure of interacting with, we maintain the credit union promise of people helping people.

To help hard-working New Yorkers build better tomorrows

Be New York's most loved financial institution by helping our members build their best financial futures

The Sr. Network Infrastructure Engineer is a key contributor to the operation and migration of MCU’s technology platforms who performs the technical tasks necessary to ensure reliable and optimal performance of the systems.

Specific duties include, but are not limited to, the following:

• Design, Strategy, Implementation, administration for mission critical, multi-data center premise based/cloud connected entities. Network security management of appliances and tools for all internal/external connections.
• Support, Administer, maintain Global DNS, DDoS, SFTP, Proxy Web Security and eMail Security ecosystems.
• Maintain, deploy, upgrade and troubleshoot premise and cloud network and security infrastructure solutions. Including connectivity of firewalls/IPS/IDS, load balancers, routers, switches, IPSEC, Site-to-Site, remote client and vendor connected VPN. LAN/WAN/MAN Circuits.
• Work with vendors, security and infrastructure teams to implement consistent technical solutions and support processes across the institution. Prepare documentation according to IT policies and standards to assure all network components/ solutions adhere to required security compliance and standards.
• Provide ongoing analysis/recommendations for the continuous improvement of premise and cloud network and security architectures. Proactively analyze network security risk and actionable remediation efforts.
• Detect and respond to alerts from network/end point detection tools.
• Assess requested security policy changes, process firewall change requests, update URL/IP/DNS (block) lists as needed
• Perform routine and non-routine maintenance and repair activities for network devices and systems
• Ability to execute tasks with high accuracy and thoroughness, maintain confidentiality while dealing with proprietary and sensitive information.

• Extensive, expert hands on experience configuring Cisco Firewalls, IPS/IDS, Routers, and Switches.
• Ability to efficiently resolve premise/cloud network issues with varying degrees of technical complexity.
• Implement changes using established testing procedures and change control. Develop and execute test criteria for all impacted changes related to network and security devices.
• Provide administration and support for projects/tickets/ BCP/Disaster Recovery procedures for the full network infrastructure inclusive of all Firewalls, Vendor connectivity, Web and DMZ services.
• Experience with Load Balancers, SFTP, SSL Certificates, Secure Web Proxy services, and secure email gateways.

• Must be able to work in a multi-functional, fast paced, high intensity team environment, work closely with other contractors and vendors as well as our employees directly, provide ad hoc advice/presentation support/attend meetings as needed with little or no notice.

• Strong team player with excellent written and verbal communication skills.
• Self-Starter, organized, meticulous documentation skills.

• Must be able to handle, prioritize, and multitask numerous projects, tickets and issues concurrently.

• Perform other duties as required
• Travel as required.
• Provide 24 x 7 x 365 support coverage including nights, holidays, weekends, extended hours and various shifts.

• Cloud connectivity and security design and support
• Cisco Next Gen Firewalls, Security, AMP, ASA, FMC, ASDM, Firepower
• Catalyst Switches, Routers ISR 4K, ASR Platforms
• Fortinet Appliances, Barracuda, Palo Alto, SMA, ESA, SFTP products
• EIGRP, BGP4, OSPF, IP Multicast, HSRP, STP, LACP, Packet capturing tools, TCP/IP, Linux, NAT
• Proficient with Visio drawings

Results - We are passionate about winning.

Agility - We proactively anticipate, respond and pivot to ensure MCU wins.

Integrity - We operate with the highest ethical standards and highest degree of honesty.

Belonging - We cultivate a culture of inclusion and teamwork.

Ownership - We take personal responsibility and hold ourselves accountable for the results.

Competitive compensation, medical and dental benefits.

401K with employer match

Flexible paid time off

Please note that the pay range provided is a good faith estimate for the position at the time of posting. Final compensation may vary based on factors including, but not limited to knowledge, skills and abilities, as well as geographic location. Incentives and/or benefits…