Functional Title: Network Security Engineer Corporate Title: AVP Overtime Eligible (Y/N) N Department: Technology Foundations Reports To: (Position) Regional Head of Infrastructure - NY Management Responsibilities: (Y/N) N Position Summary:Responsible for design, implementation and administrating Security infrastructure products. Ability to support large enterprise mission critical security products and develop new technology solutions. Provide hands on technical expertise in working with clients and other GS-IT groups on security issues.Essential Duties and Responsibilities:
- Design, implement, and maintain FortiGate firewalls in a Cisco network environment.
- Configure and manage FortiGate security features, such as firewall policies, IPS/IDS, VPN, and advanced routing.
- Troubleshoot firewall/network security issues and provide technical support to users.
- Stay up to date on the latest security threats and vulnerabilities.
- Work with other IT teams to ensure the overall security of the network.
- Document network security policies and procedures.
- Manage FortiGate licenses and renewals.
Administer all network infrastructures -LAN, MAN, WAN, VPN and DMZ's including production. Understand and administer Forintet proxies and its components. support, fault and performance monitoring, improvements, and capacity planning Make recommendations to management regarding best practices and meet business requirements. Comply with network and firewall Corporate Change Control policies and procedures. Must be able to troubleshoot hands on network, proxy, load balancers, firewall, and internet connectivity issues. Understanding of Cisco product line -switches, routers, etc. Administering of logging and security platforms: Horizon, Tenable, Vectra etc. Administering of network monitoring tools - Command, Stablenet, etc. Keep thorough and current network infrastructure documentation -Visio, etc. Off hours and weekend support required. 70% firewall security - 25% network administration - 5% voice supportExperience /Qualifications/Education:
- Excellent analytical and problem-solving skills.
- Strong communication and interpersonal skills.
- Ability to work independently and as part of a team.
- Up-to-date on the latest security threats and vulnerabilities.
Good working knowledge of UNIX (Solaris and Linux Understanding of VPN concepts, protocols and implementations Network experience with the Financial Industry's unique requirements -Market Data, exchanges Required Fortinet CSS certification (OT Security or Security Operations) Preferrable, NSE certification Over 5 years of experience in a similar position Experience with project management.Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. This document is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required by the incumbents. Job responsibilities are subject to change, with or without notice. All employees may be required to perform duties outside of their normal responsibilities at any time at the Firm's total discretion. This document does not constitute a contract of employment with you of any kind, express or implied for any duration, or with respect to any of its stated or omitted terms. As described in the Firm's employee handbook dated April 2009, the Firm reserves the right to terminate your employment with or without cause, notice or reason at any time at its sole discretion.
