Senior Network Security Engineer

at  GlassHouse Systems

GlassHouse Systems (GHS) is an enterprise systems, and managed services solutions provider that develops, designs and deploys solutions for leading enterprises in Canada and the US. For almost 30 years, GHS has delivered an enterprise level of service and support to clients. Recognized with industry-leading awards each year, GHS translates this differentiation into positive client experiences.
As a S. Network Security Engineer, you will be reporting to the Network Security Manager to implement and support a wide variety of network and security technologies, combining deep knowledge of technology infrastructure to support a seamless experience for internal and external customers. This will include participating in the design, deployment, configuration and troubleshooting of Network Security technologies such as NGFW, IPS/IDS, NAC, LAN, WAN, WLAN, Data Center, and Cloud networking technologies within Information Technology.

Requirements:

• Bachelor’s degree or equivalent
• Must have 10+ years experience working in large enterprises implementing hybrid cloud connectivity and enterprise security needs in the network context.
• Extensive support of Routing Protocols/Technologies such BGP, OSPF, MPLS VPN, Multicast.
• Demonstrated experience in LAN/WAN, MPLS, QoS, multicast and core networking discipline, including advance routing protocols like BGP and OSPF
• Experience with technologies such as: Palo Alto, FortiGate, Cisco Firepower and Juniper vSRX
• Ability to perform TCP/IP Network traces/packet captures with solid experience interpreting results.
• Experience with Firewall environments, IDS/IPS, NAC Management, SD-WAN, VPN, Firewalls, etc.
• Vendor certification –

o Cisco (CCNA , CCNP)
o Fortinet (FCA, FCP)
o Palo Alto (PCNSA)

• Troubleshooting cloud network and security infrastructure solutions, including hybrid cloud connectivity, firewalls, load balancers, IPSEC VPN, etc.
• Responsible for designing, deploying, configuring, maintaining and troubleshooting Palo Alto, FortiGate, Cisco Firepower and Juniper firewalls.
• Responsible for designing, deploying, configuring, maintaining and troubleshooting IP Networking. Routing protocols (OSPF, BGP), Segment Routing, QoS, IP VPN, VPLS, EVPN, VxLAN, NAT, etc.
• Responsible for troubleshooting, isolate and correct service-affecting issues on the network in areas including but not limited to: routing protocols, routers, switches, firewall administration, MPLS, BGP, VPN, load balancing.
• Responsible for building, interconnecting, and supporting networks with one of the cloud providers - Regions and Availability Zones. Including working knowledge and hands-on experience of VPC connectivity, Transit Gateway, Direct link/connect methodologies.
• Conduct research, analyze, recommend, implement, troubleshoot for SDWAN infrastructure (implementation and troubleshooting) (Fortinet and Zscaler products)
• Perform the execution of day-to-day networking operations to guarantee network availability, stability, and serviceability with the least amount of downtime possible.
• Design, maintain the network infrastructure services, including the installation, architecture, design, setup, troubleshooting, and maintenance of network and security software and hardware in a mixed vendor environment.
• Review assigned service requests daily, follow up and provide status updates to clients; effectively maintain service delivery status and backlog.
• Lead the technical delivery of projects, including design, configuration, and testing of technical solutions for enterprise-wide projects.
• Work with vendors, customers, partners, providers, and peer technical staff on implementation, optimization, and security of Network and Security system. This includes, but is not limited to, troubleshooting infrastructure and services including routers, switches, access points, load balancers in both an on -premises environment and an Cloud environment, layer 7 firewalls, remote access solutions and site connectivity
• Research, analyze, recommend, and implement new software, hardware, tools, systems, and processes to increase efficiency, lower total cost of ownership, and improve performance.
• Perform infrastructure maintenance and upgrades to client environments.
• Provide incident management and support to the critical issues escalated by Network Security Services Operations, including internal and external communications, team coordination of repair and then root cause analysis efforts.
• Create and review the documentation of the current Network Architecture and develop Network solutions to enhance existing services.
• Perform infrastructure maintenance and upgrades to client environments.
• Perform technical assessments using industry standard toolsets for network, server, and security architectures.
• Communicate effectively with internal and external audiences with varying levels of technical expertise.
• Participate in the on-call rotation and be able to respond to critical or high severity alerts after hours and follow documented steps to address such issues.
• Participate with on demand after hours change implementation for new initiatives and or in support of incident management