Manager Information Technology Services Information Security

Within the Chief Technology Office/Shared Delivery Services/Data Center Networks, Cloud Operations group, this position will manage advanced design, network security, and deployment of multi-Cloud connectivity projects, networking activities, and ongoing mission-critical initiatives.

Within the Chief Technology Office/Shared Delivery Services/Data Center Networks, Cloud Operations group, this position will manage advanced design, network security, and deployment of multi-Cloud connectivity projects, networking activities, and ongoing mission-critical initiatives.

• Serve as senior Cloud network security manager, engineer, subject matter expert, and liaison in the Cloud Operations group. Security tasks include: virtual network security, encryption management, identity and access governance, monitoring and threat detection.
• Serve as lead liaison to manage implementation of approved security designs and virtual network architectures across Cloud platforms Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), and multiple New York State (NYS) data centers.
• Manage secure Cloud network connectivity for dozens of NYS agencies and their applications to/from/within Microsoft Azure, AWS, GCP, and multiple NYS data centers.
• Design, deploy, and maintain Cloud networking infrastructure in AWS, Azure, and GCP to support new and existing NYS agency application deployments in the Cloud.
• Design and implement on-premises to Cloud connectivity solutions as required by application needs in collaboration with the Chief Information Security Office and network/application/architecture teams.
• Design, deploy, and maintain network virtual appliances as needed including Arista CloudEOS and Palo Alto PAN-OS with integrations into Cloud Service Provider (CSP) network infrastructure (Google Cloud Network Connectivity Center, AWS Transit Gateway Connect, etc.).
• Manage ITSM Service Requests and Incidents related to the implementation and maintenance of network firewall security policies/profiles on Palo Alto Networks Cloud Next Generation Firewalls (NGFW).
• Manage Virtual Private Network (VPN) tunneling between firewalls on premises (ZEN and Utica) and within the Cloud environments (Azure, AWS, and GCP).
• Cross-train junior staff in physical, virtual, security, and Cloud network technologies.
• Utilize Terraform to develop Infrastructure as Code (IaC) uniform Cloud configuration and backup solutions.
• Manage and lead in the orchestration of multi-discipline technologies for the resolution of complex problems; communicate with technology and business leaders for problem resolution and make recommendations for system enhancements as required.
• Provide 24x7x365 on-call network support for advanced troubleshooting, escalation, and ticket resolutions on a rotating basis.
• Collaborate and troubleshoot with direct Cloud connectivity providers to develop solutions and solve problems.
• Troubleshoot carrier-class network equipment and end-to-end network connectivity; proficiency in Layer 3 routing required, including Border Gateway Protocol (BGP), Virtual Routing and Forwarding (VRF), route maps, redistribution, Network Address Translation (NAT), subnetting, etc.
• Provide in-depth analysis on network performance using tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as-a-Service, NfSen, Ixia, Gigastor, Wireshark, etc.
• Ensure that network availability of Cloud environments is maximized by overseeing Change Control procedures, code upgrades, network monitoring, installations, moves and changes, and troubleshooting complex issues.
• Participate in network performance analysis, training, and capacity planning.
• Document all…