Job Description

Job Summary

The position offers interesting work for knowledgeable and experienced network consulting engineers (NCE) with strong network security expertise and developed customer-facing consulting skills.

Projects vary considerably between security reviews; design and implementation of security products; and involvement as part of virtual multi-discipline teams as the security lead in large-scale design and implementation projects.
Responsibilities

Responsibility for delivery of both transactional and subscriptional project to strategic customers throughout the EMEAR theater
Lead in large-scale design and implementation projects. These projects entail the integration of multiple technologies that the NCE is expected to master such as ISE, NGIPS, NGFW, ESA, WSA, etc.
To take the lead role in projects, managing less experienced engineers to ensure a successful outcome to the project.

Required Skills

Minimum of 10 years of security experience of which at least 6 must be on network security with a deep and primary technical focus.
Expert level internet working troubleshooting in a large-scale network environment using security products.
Strong technical account liaison and consulting skills are mandatory.
Expert level knowledge in network security including architecture and configuration of NGFW/IPS (FP9300/4100/2100), ASA + FP, Email and Web security (ESA / WSA), and a wide range of security products are essential for the role.
CCIE Security certified.
University/college degree equivalent.
Other beneficial qualifications are CISSP, TOGAF, CCDE, CEH, CISA and CISM, or other relevant security qualifications such as those from Check Point, Net screen, Symantec etc.


Company: Gadget Express
Employment Type: Full Time
Experience: 10 Years
Job Type: IT

Quick response

Required Knowledge

• K0001   Knowledge of computer networking concepts and protocols, and network security methodologies.
• K0004   Knowledge of cybersecurity and privacy principles.
• K0010   Knowledge of communication methods, principles, and concepts that support the network infrastructure.
• K0011   Knowledge of capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware.
• K0029   Knowledge of organization's Local and Wide Area Network connections.
• K0050   Knowledge of local area and wide area networking principles and concepts including bandwidth management.
• K0061   Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
• K0104   Knowledge of Virtual Private Network (VPN) security.
• K0111   Knowledge of network tools (e.g., ping, traceroute, nslookup)
• K0113   Knowledge of different types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN).
• K0137   Knowledge of the range of existing networks (e.g., PBX, LANs, WANs, WIFI, SCADA).
• K0179   Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• K0180   Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• K0200   Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).
• K0332   Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.

Required Skills

• S0040   Skill in implementing, maintaining, and improving established network security practices.
• S0056   Skill in using network management tools to analyze network traffic patterns (e.g., simple network management protocol).
• S0077   Skill in securing network communications.
• S0079   Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).
• S0084   Skill in configuring and utilizing network protection components (e.g., Firewalls, VPNs, network intrusion detection systems).
• S0150   Skill in implementing and testing network infrastructure contingency and recovery plans.

Required Abilities

• A0052  Ability to operate network equipment including hubs, routers, switches, bridges, servers, transmission media, and related hardware.
• A0055  Ability to operate common network tools (e.g., ping, traceroute, nslookup).
• A0058  Ability to execute OS command line (e.g., ipconfig, netstat, dir, nbtstat).
• A0059  Ability to operate the organization's LAN/WAN pathways.
• A0065  Ability to monitor traffic flows across the network.