Description : *The Threat Engineer candidate will support all technical and strategic initiatives. Responsibilities will be to ensure technical planning and logistics occur to achieve targeted schedules and annual commitment to refresh and build new DMZs are met, while incurring zero impact to the network.
The Individual must possess the ability to analyze and understand a variety of existing and evolving business requirements, interface with technology engagement teams and provide best in class Threat solutions that align to meet business and technology requirements. Candidate will be a strong engineering minded individual with polished collaboration, written, and oral communication skills. Must have a proven track record interacting with various levels of management, clients, and technical team members in delivering technical Perimeter and Threat solutions. This highly dynamic position will require the ability to manage multiple technical project engagements requiring the candidate to be a team player that can also work independently to manage multiple deadlines, priorities and a diverse set of applications and requirements.
- Key Responsibilities : *
- The Implementation Engineer plays a critical role in Release Deployment project delivery and Lifecycle Management activities. Candidate is responsible for fully understanding various technical requests, vetting the proposed solution, and implementing changes with associated work tasks, which delivers the intended outcome with zero impact to the production network.
- Detailed implementation plans will be reviewed for all designs, pre and post validation procedures, UAT acceptance criteria, and back-out plans. Candidate must understand how designs turn into Implementation, and those Implementations to be based upon standards and predefined runbooks.
- Operate quality assurance functions prior to each implementation to meet engineering standards and mitigate risks. Proactively raise questions and / or concerns to the Design Engineering team to address them prior to change implementation.
- Build and Operate various Threat platforms (McAfee, FireEye, F5 SSLO and Alteon), and respective management systems.
- Adheres to work effort and project close-out practices such as database updates, asset tracking, inventory systems, records retention, and the related systems, tools, and process updates.
- Works with Security Architecture and Engineering in a “knowledge sharing” capacity in support of adoption of the new technology, systems or process changes. Identify opportunities to improve service delivery and objectively measure the effects of these efforts over time.
- Understanding of the Bank’s Network Infrastructure and associated Risk Management practices are highly recommended to remain successful.
- Knowledge of DMZ Networking and Cisco Routing / Switching is a plus.
- Excellent oral and written communication – must be able to communicate at all organizational levels.
- Strong attention to detail and ability to follow an existing refined process, while also seeking continual improvements. Assess and advise of solutions to improve processes.
- Strong analytical, problem solving, and organizational skills required.
- Proven ability to effectively collaborate with others, make decisions to initiate action, and adapt to change.
- Bank experience highly recommended along with comprehensive knowledge of business unit’s functions.
- Proactively engage to assess readiness and ensure zero impact from changes.
- Leadership skills during technical troubleshooting triages – strong analytical skills.
- Ability to work nights, weekends, and holidays as required to support implementation activities.
- Development and maintenance of High Level and Low-Level Design diagrams / documentation.
- Experience with Proxies (ex. McAfee or BlueCoat).
- Experience or broad knowledge of FireEye, Alteon and F5 Secure Socket Layer Orchestrator (SSLO).
- Strong knowledge of network routing / switching (routing protocols, multicast, other LAN protocols).
- Functional understanding of diverse set of networked applications requiring perimeter management solutions, including HTTP, HTTPS, SSH, FTP, DNS, NTP, ANYCAST services, and others.
- DMZ Network infrastructure knowledge including topology, security policies, firewalls and the L2 / L3 switch and router infrastructure is required.
- Programming skills a plus : sh, Perl, Python, Golang, C, C++.
- Administrator level ability with UNIX (Linux or another variant) is highly desirable.
- Bachelor’s degree and 5-10 years of IT experience with Firewalls Threat Prevention solutions.
- Skills : *
Proxy, Routing, Switching, Secure Socket Layer Orchestrator (SSLO), FireEye, Firewalls, McAfee WebGateway, Bluecoat ProxySG, Trellix, Cisco Routing / Switching
Proxy, Routing, Switching, Secure Socket Layer Orchestrator (SSLO),FireEye, Firewalls, McAfee WebGateway, Bluecoat ProxySG, Trellix
Expert Level
About TEKsystems :
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.