Firewall Engineer

The Secure Connectivity (SC) Firewall team is responsible for the preparation and implementation of all Firewall and Security related Inter Network Connectivity Requests (INCRs) across the Bank's global infra-structure. This role will be based within the Secure Connectivity (SC) team.

The Firewall Engineer's duties will cover the preparation and implementation of Firewall and security related connectivity requests via the INCR system.

Typical services/applications and environments where the INCR request is utilized are:

- eCommerce/Internet
- Global Ultra Low-latency Market Data services
- Extranet client services
- Multiple Projects across DB for Divestment, Outsourcing and Acquisition
- Global Datacenter migrations and upgrades
- External Vendor Connectivity and VPN's

Key Skills candidates will have:

- A strong understanding of networking principles
- Excellent understanding of network security principles and methods
- A good understanding of system integration concepts (clustering/load-balancing/fail-over methods)
- A strong understanding of Network Address Translation (NAT) principles
- The ability to quickly adsorb and understand unfamiliar network environments and device configurations
- Appropriate risk assessment skills to ensure minimal operational impact to Production based services
- Effective written and verbal communication skills
- Effective technical documentation skills (including the use of Visio)
- Demonstrated technical experience with the following:
- Check Point technologies, Check Point Provider 1 central management system
- Juniper devices, Juniper NSM central management system
- Cisco Routing and switching technologies
- Proxy technologies (Web Gateways, Bluecoat, Netcache)
- SOCKS v4/5 protocols
- A high level of understanding with Cisco Networking Devices, including ACL management, configuration and troubleshooting of Routers and Switches
- A good understanding of routing protocols and the ability to troubleshoot protocols such as OSPF, BGP
- A general level of understanding of UNIX based systems (Solaris/Linux) would be advantageous but not essential
- CCNP level of knowledge and experience
- Experience and awareness in Scripting languages (Perl/TCL desirable)

YOU WILL BE:

- Check Point entry level Vendor Certification - Check Point Certified Security Administrator (CCSA) - desirable
-Juniper entry level Vendor Certification - JMCIA (JUNOS Associate Certification) - desirable
- Cisco certified - desirable
- Experienced in working within a multi-tiered networking environment
- Showing experience of networking environments for a minimum of 5 Years
- Capable of working under pressure and to tight deadlines whilst maintaining attention to detail

The role will typically cover the hours between 8am and 6pm via an early and late shift arrangement; however some flexibility would be expected to ensure successful completion of INCR's. Contractual hours are 40 hours per week.