Installation, operation, administration, and optimization of at least one of the following platforms:

• Check Point Secure Gateways
• Cisco FirePower (FMC and FTDs)
• Cisco ASA for RAS VPN and S2S VPNs
• F5 Application Delivery Controllers (LTM, AFM, DNS/GTM)
• Cisco ISE
• Cisco NAC
• LogRhythm SIEM
• SecurID RSA

Core responsible applicable to all technology focus profiles:

• Perform security vulnerability scans. Desirable experience with Tenable io/sc.
• Packets capture interpretation and analysis to conduct forensic analysis and/or identify performance issues.
• Working with Sr. and Lead Network Security Engineers, develops design criteria for testing of new technologies coordinating with all engineering/operations/management necessary to meet project's milestones.
• Respond to, diagnose, and resolve technical issues in relation to the Internet delivery systems.
• Monitor performance and health check status of Network Security appliances, platforms supporting Cybersecurity operations and/or application delivery controllers.
• Provide technical assistance to internal departments and organizations. Engineering teams and regular users of Corporate IT services.
• Work as part of a group with other engineering departments (both IPNT and other) issues relating to the Internet and IT delivery systems.
• Develop and improve methods and tools for the troubleshooting and researching of problems.
• Create and maintain logs, records, diagrams, and reports of any of the platforms supporting cybersecurity operations.
• Standby on-call service to attend escalations outside business hours (1 week per month)
• Participates in special projects and performs other duties as directed by Lead and Principal Engineers as they pertain to the respective discipline.

For Firewall administrators:

• Fulfillment of network access request to establish connectivity between systems and applications.
• Conduct end-to-end network path analysis to determine changes needed to allow new network access requirements or troubleshoot potential connectivity problems.

For ADC administrators:

• Fulfillment of ADC request, troubleshooting and development of i-rules.
• Troubleshooting, i-health and packet capture on F5 devices.

For VPN administrators:

• Able to configure and troubleshoot Cisco-based S2S VPN
• Able to configure and troubleshoot Cisco-based RAS VPNs
• Able to perform software and hardware upgrades of Cisco ASA and/or Cisco ASA over Cisco FTDs.

For NAC Administrators:

• Able to configure and troubleshoot Security Posture/NAC based on Cisco AnyConnect for RAS VPN and LAN/WiFi clients.

Security Analyst:

• Able to operate and maintain one of the following platforms:
  • LogRhythm SIEM.
  • RSA SecurID
  • Cisco ISE.