Sr NetOps Engineer

Sr. Net Ops Engineer

The Sr. Net Ops engineer will have a strong network security focus and will be responsible for contributing to overall network security infrastructure and posture, contribute to and lead network security projects, and provide escalation support for network security related issues.

Key duties include managing and maintaining firewalls and rule sets, troubleshooting connections through firewalls and other security devices, investigating and supporting network security escalations, providing insights on potential network security improvements, and provide operational hand-offs for completed projects and implementations. Some travel between office locations may be required on an as-needed basis for projects.

The Sr. Net Ops engineer must possess the ability to troubleshoot and document solutions to complex problems and execute project tasks within a team environment. A successful engineer will professionally work with other teams in the organization while keeping management appraised of the status of his/her projects and any escalations.

This position will require the engineer to be onsite at the Bensalem location for first 90 days and can then transition towards to a hybrid schedule. This position will be part of an on-call rotation that requires the engineer to be on-site while on-call.

Responsibilities/Tasks:

• Lead and contribute to projects, implementations, and integrations.
• Create documentation and diagrams for new projects and updated documentation for existing implementations and systems where necessary.
• Provide escalation support for network security infrastructure including firewalls, identity management systems, and other network-based security systems.
• Lead efforts to reviews, audit, and remediate network security devices for compliance with standards.
• Support requests from other teams and business units within PFFCU.
• Analyze and diagnose reports of network security related problems while documenting root causes, providing recommendations for remediation, and performing corrective actions.
• Be able to take immediate control of incidents and escalations and drive them to resolution.
• Be able to work with vendors for problem escalation and drive them to resolution.
• Lead and ensure timely completion of both short term and long-term projects.
• Participation in an on-call rotation.
• Lead vulnerability remediation efforts within the team.
• Actively participate in security device reviews and hardening.
• Actively participate in security architecture and topology reviews to identify potential issues, plan for future expansion, and identify potential improvements for PFFCU's security posture.
• Actively participate in review and analysis of proposed software and hardware modifications, including vendor software patches and user requests.
• Develop a strong working knowledge of the business side of PFFCU and be able to interface effectively with all groups.
• Demonstrate a deep understanding of the business impact of system changes and be able to clearly explain and relate their impact to affected users.
• Document internal support processes and procedures and build runbooks for new systems.
• Actively contribute to security designs and processes in order to ensure the integrity and availability of all PFFCU's systems.
• Work closely with all teams in Information Systems on projects of all scopes, including complex and cross-functional efforts.
• When appropriate engage and collaborate with third party services.
• Ensure timely completion of projects and deployments in conjunction with the Business Plan.
• Other duties as assigned by the Management.

Qualifications:

• 10+ years' hands on experience with network and network security infrastructure in a predominantly Cisco environment.
• 10+ years' experience working on large projects, implementations, and integrations.
• Demonstrated understanding of core network security technologies and philosophies such as zero trust architectures, Net Flow, firewalls, data loss prevention, EDR/XDR, identity management, and secure network access mythologies.
• Possess a strong foundation in TCP/IP communications.
• Demonstrated understanding of IP routing and protocols including OSPF and BGP.
• Demonstrated understanding of WAN technologies used in a multi-site and remote work environment including MPLS, IPsec, SDWAN, and remote access VPNs.
• Demonstrated understanding of VXLAN fabrics and multi-VRF environments.
• Active CCNP Security or equivalent certifications with a focus on Security are desired.
• Possess strong knowledge of current network security tools and technologies.
• Possess strong knowledge of network monitoring tools and technologies.
• Possess strong and effective written and verbal communication skills.
• Possess excellent customer service skills and be able to work independently and within a team in a highly customer-focused environment.
• Bachelor's degree in technical field; or related experience and/or training; or equivalent combination of non-academic education and experience is desired.
• Ability to work on after-hours…