Network Engineer

New laws and regulations at the Federal and State level, as well as our corporate requirements to protect the confidentiality of patient, member, and business information have caused an increase in the scope, visibility and intensity of our information security efforts.

Position Overview: As a member of the Network Access Management team, you will utilize your technical skills to ensure the successful engineering, implementation and operation of complex solutions to meet business needs. Your responsibilities may include:
Receipt, evaluation and implementation of inbound Infrastructure Access user and device provisioning/deprovisioning service requests
On-call activities in support of 7x24 security infrastructure and HA service goals
Third-level troubleshooting, problem identification, problem resolution and/or resolution recommendation activities in support of first- and second-level teams
Infrastructure Access component hardware/software upgrades
Engineering, implementation and operation of Infrastructure Access solutions at Data Centers and facilities
Infrastructure Access vulnerabilities research and investigations, including proposal of alternative implementation options
Infrastructure Access consulting for new projects
Infrastructure Access reviews of proposed projects
Implementation of new solutions and risk mitigation techniques

This position requires: attention to detail, the development of detailed security documentation and procedures, strong team skills, the ability to work independently as well as with others, the ability to multi-task assignments, and the communication of complex technical information to team members, all levels of management and customers. The candidate should have experience working in a large enterprise and be able to work well under pressure.

Minimum Requirements: The candidate must have a minimum of 5 years experience in a technical engineering and/or operational role. Excellent communications and problem solving skills are a must for this position. The candidate should have a good networking background and experience, with the ability to do troubleshooting of both access control and network related problems. The candidate should have a strong grasp of the concepts of strong two-factor authentication, AAA, access control and least privilege. The candidate must have more than passing exposure to VPN (both IPSec- and SSL-based), RADIUS, TACACS, and RSA SecurID.

Additional: Experience with 802.1x, WPA2 Enterprise, authentication and access controls in a mobile environment, and mobile device security are all highly desirable. Experience with CiscoSecure ACS v4 for Windows and CiscoSecure ACS v5, and Cisco ASA v8 and Cisco ASDM v6 are highly desirable. Experience with Remedy Service Management and Problem Management would be a plus. A CCNA and the CISCO Certified Security Specialist certification and/or CISSP or other general Security certification is a plus. UNIX/Linux experience and/or Scripting skills would be a plus. Macintosh, Windows, iOS, Android experience would also be a plus. Situational analysis skills also desired.

Top 3 - 5 Daily responsibilities

- Execution of Service Requests and Operational Activities
- Design and Implementation of Access Management Solutions
- Troubleshooting Technical Issues

Top 3 - 5 Required Skills
- Excellent problem solving skills
- Ability to apply security principles
- In depth understanding of enterprise level network infrastructure

Desired skills
- Familiarity with VPN, IPSec and SSL
- Familiarity with CISCO Secure ACS
- Familiarity with two-factor authentication
- Familiarity RADIUS, TACACS, and AAA
- Familiarity with multiple Operating Systems ( server, desktop, and mobile)
- Familiarity with enterprise wireless authentication & security
- Familiarity with encryption principles
- Familiarity with certificate management

Soft Skills
- Strong attention to detail
- Ability to multitask
- Ability to communicate technical information to non technical audiences
- Ability to work well with others and independently