Network Security Engineer - Juniper SME

Profile

THIS POSITION IS A PERMANENT CONTRACT (or PERMANENT FULL-TIME) ENGAGEMENT LOCATED IN DOWNTOWN CHICAGO. CANDIDATE MUST BE ABLE TO PASS A BACKGROUND CHECK. POSITION IS AVAILBLE FOR IMMEDIATE FILL.

MUST BE JUNIPER (NETSCREEN & SSG) PROFICIENT AND EXPERIENCED.

The ideal candidate would have a robust background in network architecture, maintenance and monitoring. The candidate will be added to an existing IT team which s/he will interact with on a daily basis. This position interacts with all IT functional areas (e.g. architecture, design, network engineering, Helpdesk/Desktop support, application development and support). The candidate will be someone who can troubleshoot technology related problems that might include multicast routing, datacenter design, troubleshooting intermittent packet loss, latency issues, trading system connectivity and equipment failure. The successful candidate must be highly self-motivated, excel at multitasking, and comfortable working in a demanding, state of the art environment.

Job Functions:

Day to day support of network environments.

Proactively suggest enhancements to existing configurations, technologies or procedures.

Work closely with all IT functional areas to design and implement operational requirements for new and existing IT systems.

Ability to follow and enhance existing IT policies and procedures.

On-call support rotation.

Support other key initiatives as the business dictates.

Troubleshoot intricate network and systems issues down to the bit level and up to the application layer.

Provide critical thinking to complex problems in a 24/7, mission critical network environment.

Process, monitor and prioritize trouble tickets.

Automate any and all tasks that can be automated.

Provide support and administration of customer firewalls and security appliances

Provide support and administration of customer network load balancing appliances

Job Qualities:

Thorough understanding of the TCP/IP protocol.

Detailed knowledge of the OSI layers 1-4 and associated equipment.

Experience with advanced network concepts and technologies such as QoS, CoS, IDS/IPS, VoIP, flow control,

Knowledge of DWDM and CWDM.

Advanced Knowledge of switch architecture, ASICs and packet flow for current generation switches/routers.

Knowledge of implementing and troubleshooting dynamic routing protocols such as EIGRP, BGP and OSPF.

Experience with packet sniffing applications (Snort, TCPDump, Wireshark, Netmon, etc).

Experience performance tuning networking infrastructures.

Solid knowledge of scripting languages (bash, perl,) or programming languages (C , C#, VB).

Job Requirements:

5 years’ experience in network administration/engineering in a senior or lead position.

Active or near completion of CCNP, CCIE or similar IT certification a plus.

Good written and verbal communication skills. Must be able to interact with management, vendors and external parties and should be able to effectively communicate complex issues in a clear and concise manner. Must be able to thoroughly document implementations, modifications and removals.

Highly organized, self-motivated, able to multi-task, able to work independently as well as a team player.

Analytical and detail orientated.

Must be willing to work some weekend shifts in support of maintenance and participate in on-call rotation duties.Must have experience in 24x7 environments.

Must have expertise within the following category and product lines

Firewall: Juniper ISG/SSG (including VSYS), Check Point NGX, Cisco PIX and ASA

IPsec VPN: Juniper ISG/SSG, Check Point NGX

SSL VPN: Juniper Secure Access

IPS and IDS: Juniper IDP, ISS, McAfee Intrushield

Application Firewall: F5 Application Security Manager (ASM), Apache ModSecurity, Check Point SmartDefense

Authentication, Authorization, and Auditing: RSA Authentication Manager, Juniper Steel-Belted RADIUS, LDAP, Juniper UAC

Security Management: Juniper NSM, Check Point SmartCenter, Cisco ASDM, ISS SiteProtector

OS hardening: CIS Benchmark

Penetration Testing: WebInspect, Nessus, Foundstone, Nikto, Nmap, Metasploit desired

Scripting: Unix shell, Expect desired

Configuration Control and Auditing: Tripwire, Syslog-ng, Splunk or similar product

Network Traffic Management: SQUID, McAfee Web Gateway or similar product

Compliance and Auditing: PCI, HIPAA considered a plus

Application Installation and Administration: Apache, BIND DNS, Sendmail, GnuPG, MRTG

Confidential Company

Company info

GO AHEAD SOLUTIONS
Website : http://www.goaheadsolutions.com/