Network Security Engineer

My client in Westlake, TX is looking for a Network Security Engineer for a 6+ month contract.

MUST HAVE: Checkpoint Firewall Experience

W2 EMPLOYEES ONLY!

Job Description

- Minimum of a Bachelor's Degree Lead efforts to analyze network security designs, engineer solutions to network elements, develop deployment strategies and update technical documentation for the IP Security Networks in our various MSCs and Network Equipment Centers (NECs).
- Engineer solutions to VPN security requests in a timely manner while meeting business needs and maintaining network security and risk management policies.
- Participate in design discussions with NNO Planning and Design Teams to engineer new designs, provide secured network segments and transport systems security policies for all systems.
- Responsible for analysing new application data flows and designing VPN and Firewall policies that support application requirements, adhere to security practices, and meet project timelines.
- Responsible for analysing VPN change requests and integrating changes into existing Firewall policies, while maintaining security standards.
- Responsible for analysing requirements and designing VPNs that provide secure network connectivity to Partners and Vendors.
- Lead efforts to create new MSC and Network Equipment Center security designs based on current business needs, capacity increases, customer growth, directional platforms and emerging technology releases.
- Lead forums and projects on the above and work with other Security, Product Development, Transport Systems and Commercial teams to discuss and solicit feedback on the designs, standards and implementation approaches related to VPNs.
- Provide technical leadership and guidance to other members of the Security Team.
- Develop and maintain security documentation and standard documents, as required.
- Manage, maintain and configure security network hardware (ex. Firewalls, VPN devices, Logging Systems, Security Provisioning Systems) when necessary.
- Provide higher tier technical support to the Operations-Implementations, Security-Implementations, Operations- Management and Engineering teams on all security related networking issues.

Qualifications:

- Bachelor of Science in Telecommunications, Electrical Engineering, Computer Science, Information Technology or equivalent data security and networking experience required specifically in a Wireless Service Provider environment.
- Must possess the experience and ability to lead and participate in technical sessions, to lead projects that span multiple organizations and to coordinate technical, implementation and/or troubleshooting discussions.
- Must be available for occasional overnight work as required for high profile changes and supporting Implementation teams.
- A strong understanding of structured network design and deployment, and OSI Interconnect Model and how it relates to the design and deployment of structured networks, is required as well as strong project management skills, strong interpersonal and communication skills (written and oral), and the ability to handle multiple projects simultaneously.
- Must have hands on working knowledge of IPsec VPNs including site to site and client VPNs preferably on Fortinet and/or CheckPoint.
- Must have experience building and troubleshooting IPSec VPNs including troubleshooting negotiation failures.
- Must have STRONG KNOWLEDGE of the following: -Fortinet Fortigate (5.x or later) -Fortinet FortiManager and FortiAnalyzer -CheckPoint Provider NGXR55 (or later) -CheckPoint Provider -1GUI -TCPdumpr and/or WireShark Juniper Netscreen Manager (NSM) -Building and editing Firewall rules/policies -Building and maintaining Site to Site IPSec VPNs -Tufin or equivalent Security Optimization system (Algosec, RedSeal, Etc)
- Must have BASIC KNOWLEDGE of the following: -Juniper ISG/SRX Hardware -Intrusion Detection and Prevention (IDP) concepts -Intrusion Detection System (IDS) concepts -Access Control Lists (ACL) concepts -Routing Protocols (OSPF & BGP) -IPv6