Senior Network Security Engineer

at  Marriott International Inc

Job Number 24151043
Job Category Information Technology
Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAP
Schedule Full-Time
Located Remotely? Y
Relocation? N
Position Type Management

JOB SUMMARY

The Senior Network Security Engineer, Network Site Reliability Engineering (SRE) is the subject matter expert in designing and implementing the Network security strategy and platforms for the next-gen operations for all Marriott International (MI) networks including the Property Networks, Datacenter/Cloud Networks, and Corporate Networks. This role will work closely and collaboratively with a matrix team of expert network architects and engineers to drive adoption of SRE practices and operating models across all network product towers, and around globe. As the Senior Network Security Engineer, the candidate focuses on defining and executing the zero-trust strategy to prevent un-authorized access to Marriott network as well as meet stringent compliance requirements. Reporting to Director of SRE, the engineer will be responsible to articulate and effectively execute a vision to address increasing complexity, scale of modern IT systems, and ensure real-time asset visibility, assessment, remediation, and access control to Marriott services. The successful candidate will be expected to bridge the gap by implementing security strategies and next-gen zero trust solutions to make sure all system components are meeting Marriott network access and security compliance requirements at granular level. This role is accountable for establishing technical level relationships and partnering with all business disciplines, other MI teams, solution providers/vendors, and operational partners to define and implement the Network SRE zero trust security roadmap, building and enforcing the standards defined in it.

REQUIRED EDUCATION AND EXPERIENCE

• Undergraduate degree in an engineering or computer science discipline and/or equivalent
• experience/certification
• 7+ years’ experience in information technology including:
• 6+ years’ experience with network security tools related products
• Experience in installing, configuring, and troubleshooting of zero trust security tools (Cisco ISE or other network admission tools)
• Thorough understanding of TACACS+, RADIUS protocols
• Strong preference to have product certifications (CCIE, CCNP, CCNA)
• Must possess expertise in designing and implementing policies in the tool(s) mentioned above
• Experience with one or more Cloud Computing platforms (e.g. Amazon AWS, Microsoft Azure, Google Compute Engine)
• Knowledge and experience in wireshark/tcpdump/nmap and related analysis techniques
• Experience in developing, documenting, and managing the requirements gathering process and provide detailed design and implementation plan to support the requirements throughout the project life cycle
• Field experience and knowledge of foundational data networking and IP technologies including (ARP, TCP/IP, UDP, DHCP, DNS, NAT and others)
• Awareness in installing, managing, troubleshooting and administration of firewall management solutions (Firemon, Palo Alto Panorama, Checkpoint MDS, Aruba ClearPass)
• Experience in Agile methodologies, daily stand-up meetings, sprint planning sessions and user story preparations
• Hands-on experience with common routing and switching platforms (Cisco, Juniper, HP/Aruba etc.)

DEMONSTRATING AND APPLYING DISCIPLINE KNOWLEDGE

• Provides technical expertise and support to persons inside and outside of the department.
• Demonstrates knowledge of job-relevant issues, products, systems, and processes.
• Demonstrates knowledge of function-specific procedures.
• Keeps up-to-date technically and applies new knowledge to job.
• Uses computers and computer systems (including hardware and software) to enter data and/ or process information.

Please refer the Job description for details