Network Security

OUR CLIENT IN BRANCHBURG, NJ IS LOOKING FOR A NETWORK SECURITY FOR A 2+ YEAR CONTRACT.

RESPONSIBILITIES

- LEAD EFFORTS TO PROVIDE NETWORK SECURITY DESIGNS, SOLUTIONS, DEPLOYMENT STRATEGIES, AND TECHNICAL DOCUMENTATION FOR THE IP SECURITY NETWORKS IN OUR VARIOUS MSCS AND NETWORK EQUIPMENT CENTERS.
- PARTICIPATE IN DESIGN DISCUSSIONS WITH NNO PLANNING AND DESIGN TEAMS TO DESIGN NEW SECURED NETWORK SEGMENTS AND TRANSPORT SYSTEMS SECURITY POLICIES FOR THESE LOCATIONS.
- RESPONSIBLE FOR ANALYSING NEW APPLICATION DATA FLOWS AND DESIGNING ACCESS LIST POLICIES THAT SUPPORT APPLICATION REQUIREMENTS, ADHERE TO SECURITY PRACTICES, AND MEET PROJECT TIMELINES.
- RESPONSIBLE FOR ANALYSING ACCESS LIST CHANGE REQUESTS AND INTEGRATING CHANGES INTO EXISTING ACCESS LIST POLICIES, WHILE MAINTAINING SECURITY STANDARDS.
- LEAD EFFORTS TO CREATE NEW MSC AND NETWORK EQUIPMENT CENTER SECURITY DESIGNS BASED ON CURRENT BUSINESS NEEDS, CAPACITY INCREASES, CUSTOMER GROWTH, DIRECTIONAL PLATFORMS AND EMERGING TECHNOLOGY RELEASES.
- LEAD FORUMS AND PROJECTS ON THE ABOVE AND WORK WITH OTHER SECURITY, TRANSPORT SYSTEMS, AND CDS TEAMS TO DISCUSS AND SOLICIT FEEDBACK ON THE DESIGNS, STANDARDS AND IMPLEMENTATION APPROACHES.
- PROVIDE TECHNICAL LEADERSHIP AND GUIDANCE TO OTHER MEMBERS OF THE SECURITY TEAM. DEVELOP AND MAINTAIN SECURITY DOCUMENTATION AND STANDARDS DOCUMENTS, AS REQUIRED. MANAGE, MAINTAIN, AND CONFIGURE SECURITY NETWORK HARDWARE (EX. ROUTERS AS PACKET FILTERING DEVICES, LOGGING SYSTEMS, SECURITY PROVISIONING SYSTEMS) WHEN NECESSARY.
- PROVIDE HIGHER TIER TECHNICAL SUPPORT TO THE DSO-I, FSI, DSO-M AND DSE TEAMS ON ALL SECURITY RELATED NETWORKING ISSUES.

QUALIFICATIONS

- BACHELOR OF SCIENCE IN ELECTRICAL ENGINEERING, COMPUTER SCIENCE, INFORMATION TECHNOLOGY, OR EQUIVALENT DATA SECURITY AND NETWORKING EXPERIENCE REQUIRED SPECIFICALLY IN A WIRELESS SERVICE PROVIDER ENVIRONMENT.
- MUST POSSESS THE EXPERIENCE AND ABILITY TO LEAD AND PARTICIPATE IN TECHNICAL SESSIONS, TO LEAD PROJECTS THAT SPAN MULTIPLE ORGANIZATIONS, AND TO COORDINATE TECHNICAL, IMPLEMENTATION AND/OR TROUBLESHOOTING DISCUSSIONS.
- A STRONG UNDERSTANDING OF STRUCTURED NETWORK DESIGN AND THE OSI INTERCONNECT MODEL, ESPECIALLY HOW IT RELATES TO THE DESIGN AND DEPLOYMENT OF STRUCTURED NETWORKS, IS REQUIRED AS WELL AS STRONG PROJECT MANAGEMENT SKILLS, STRONG INTERPERSONAL AND COMMUNICATIONS SKILLS (WRITTEN AND ORAL), AND THE ABILITY TO HANDLE MULTIPLE PROJECTS SIMULTANEOUSLY PROVEN EXPERIENCE IN THE FOLLOWING TECHNOLOGIES IS REQUIRED:
- MINIMUM 5-8 YEARS EXPERIENCE IN IP ADDRESSING AND SUBNETTING (IPV4 AND IPV6), ROUTING PROTOCOLS, VLAN CONFIGURATION AND CONCEPTS, PPP, L1/L2 SWITCHING TECHNOLOGIES, T1, T3, METRO E, CAT5/5E/6 CABLING, FIBER CONNECTIVITY, SNIFFER PRODUCTS, QOS, AND THE CREATION OF MANAGED SERVICES ARCHITECTURES IN SERVICE PROVIDER NETWORKS.
- MINIMUM 2-4 YEARS EXPERIENCE IN NETWORK SECURITY IN A TELECOMMUNICATIONS ENVIRONMENT IS REQUIRED INCLUDING EXPERT KNOWLEDGE OF TCP/IP WITH A SPECIALIZATION IN NETWORK SECURITY AND SECURITY BEST PRACTICES.
- MINIMUM 2-4 YEARS EXPERIENCE DESIGNING AND MAINTAINING ACCESS LIST POLICIES UTILIZING CISCO OR JUNIPER HARDWARE.
- STRONG KNOWLEDGE OF CORE COMMERCIAL APPLICATIONS (DNS, AAA, MMSC, WAP, ETC.) AND DATA FLOWS IS HIGHLY DESIRABLE.
- MINIMUM 5 YEARS EXPERIENCE CONFIGURING ACCESS LISTS ON CISCO AND JUNIPER PLATFORMS INCLUDING BUT NOT LIMITED TO THE CISCO 6500,12KS, ASR9KS, UTILIZING THE IOS XR AND LEGACY IOS.
- JUNIPER MX320, MX960 AND MX480 CANDIDATE MUST HAVE EXPERT LEVEL EXPERIENCE IN DATA CENTER AND MOBILE SWITCHING CENTER SECURITY DESIGN, OVERALL SECURITY BEST PRACTICES AND PACKET CAPTURE METHODS AND TECHNOLOGIES.
- CANDIDATE MUST ALSO POSSESS EXPERT LEVEL EXPERIENCE WITH IP ADDRESS ALLOCATION FUNDAMENTALS, AWARENESS OF SECURITY IMPACTS BASED ON IP DESIGN, AND THE ABILITY TO WORK WITH PROJECT TEAMS AND VENDORS TO LEARN NEW PLATFORMS AND DEVELOP SCALABLE IP DESIGNS.
- CANDIDATE SHOULD HAVE EXPERIENCE WITH DATA NETWORK AND SECURITY DESIGN OF VOICEMAIL SYSTEMS, WIRELESS GATEWAYS, VOIP SYSTEMS, NETWORK EXTENDER CONCEPTS AND THE METHODS FOR SECURING THEM AND OTHER VOICE AND WIRELESS DATA SYSTEMS NETWORK INTEGRATIONS.
- CANDIDATE SHOULD ALSO POSSESS STRONG KNOWLEDGE OF WIRELESS DATA ARCHITECTURE AND PRINCIPLES, EXPERT LEVEL KNOWLEDGE IN NETWORKING SECURITY (IE PACKET FILTERS, HACKING METHODS AND STRATEGIES, SECUREID, SECURITY PROTOCOLS, RADIUS, PACKET CAPTURE TECHNOLOGIES AND ANALYSIS), SNMP, NETWORK MANAGEMENT, HP OPENVIEW, CONCORD EHEALTH, AND NETWORK EQUIPMENT MIBS.
- VOIP EXPERIENCE IS DESIRABLE. CANDIDATE MUST POSSESS EXPERT LEVEL KNOWLEDGE AND EXPERIENCE WITH QOS AND DMZ ARCHITECTURES.
- CANDIDATE SHOULD HAVE KNOWLEDGE AND EXPERIENCE WITH CONTENT SWITCHING PRINCIPLES INCLUDING GLOBAL SERVER LOAD BALANCING TECHNIQUES, ADVANCED SERVER HEALTH MONITORING TECHNIQUES, KNOWLEDGE OF DNS FUNCTIONALITY HOLISTICALLY AS WELL AS WITHIN CONTENT SWITCHING ENVIRONMENTS, AND THE ABILITY TO CONCEPTUALIZE DATA FLOWS FOR VARIOUS TYPES OF APPLICATION DATA.