Network Security Engineer II

Job Title : Network Security Engineer II - IN

Job Summary :

The Network Security Engineer-II is a key element within the Rackspace Infrastructure team and is expected to provide a high level of technical expertise to ensure the uptime and maintenance of critical networking systems. A Racker in this role takes ownership of complex network issues and ensures they are resolved and/or successfully documented and handed off to an oncoming shift.

The NSE II actively monitors the Rackspace network at all levels, from top of rack to edge, using various tools and communicates and resolves issues identified or escalates them to the appropriate level. The Racker also responds to issues escalated to Network Security Engineer via tickets and phone calls from internal customers and is expected to engage directly with external customers via public ticket comments and phone conversations to ensure problem resolution.

Technical issues can include troubleshooting customer network environments including firewall configurations, VPN technologies and access-control lists, Load balancer configurations, Licensing allocation, intermediate product troubleshooting, intermediate IP configuration, intermediate backbone structure, provide networking architecture solutioning, intermediate internal networking infrastructure knowledge.

The Network Engineer will create and maintain customer loyalty by providing Fanatical Experiences above and beyond customer expectations. Responsible for adhering to company security policies and procedures and any other relevant policies and standards as directed.

Career Level Summary

• A minimum of 6+ years of recent network security experience.
• Requires intermediate to advanced depth or breadth of expertise in own job discipline or field.
• Leads others to identify and solve complex problems.
• Works independently, with guidance in only the most complex situations
• May provide guidance to standard project expectations
• Act as a mentor for Level I engineers and provide training to new hires as needed.

Critical Competencies

• Systems Thinking: Enables optimum organizational efficiency by taking a whole systems approach and thinking across boundaries to identify which polices/processes should be standardized and which should differ
• Idea Creation: Examines new ideas of solutions, methods and products to ensure the potential and alignment with departmental and business goals

Key Responsibilities

• Configure and troubleshoot for Firewalls & Load Balancers and Customers IP space .
• Create documentation for support and operations tasks regarding the above tools
• Engineer and implement customized security solutions .
• Mentor and train fellowRackers .
• Configure, plan, install, maintain, and optimize network systems, equipment, and applications ensuring network protocols and security policies are used effectively.
• Solve engineering problems through the ownership of appropriate level customer requests and issues, seeing them through to resolution.
• Collaborate with Account Managers and Implementation Consultants/PMs to build strong customer relationships.

Technical Requirements

• Intermediate knowledge of: NexGen Firewalls (For example: Cisco Firepower, Palo Alto etc.), IPSEC and SSL VPN technologies also Infrastructure, Automation (Preferred) .
• All supported network platforms (Cisco 2900, 3500, 3700, 4900, 6500, ASR1k, ASR9k, Nexus 3k, Nexus 6k, Nexus 7k, Arista 7000, etc.)
• All supported Layer 2 and 3 protocols and features (STP, HSRP, VLANs, CDP, port-channels, OSPF, BGP, MPLS, DWDM, etc.)
• In depth knowledge on Firewall Palo alto, Cisco ASA, Firepower, Juniper, F5 -LTM/AFM, Citrix Load balancers .
• Knowledge of Analysis of VPNs implementation and Manage and Monitor all VPN connectivity.
• Networking concepts and devices (All OSI Layers), Load balancers (For example: F5), HTTP Protocol, Secure Socket Layer (SSL), DNS, Content switching policies.
• Implementation of Gateway, Edge firewall and LBs .
• Intermediate Understanding of network packet analysis via tools such as packet captures on firewalls, logging for Palo Alto and TCP dump.
• Intermediate to advancedunderstanding of services and protocols commonly used in hosting environments: web servers, database servers, active directory protocols.
• Interprets internal/external business challenges and recommends best practices to improve products, processes, or services.
• Initial firewall/IPS/IDS testing of parameters, operation, support, and commissioning.

Skills

• Passionate about technology and has a desire to constantly expand technical knowledge
• Detail-oriented in documenting information and able to own customer issues through resolution
• Able to handle multiple tasks and prioritize work under pressure
• Demonstrate sound problem-solving skills coupled with a desire to take on responsibility
• The ideal candidate possesses: Excellent written and verbal communication skills .

Education

• Bachelor's Degree in Computer Science, B.E,MCA/BCA , Management Information Systems, or a related technical field

Certifications

• Any combination of Juniper, Cisco certifications, F5, Palo Alto, NetScaler, or combination of other relevant vendor certifications experience desirable .

Physical Demands

• General office environment: no special physical demands required.
• May require long periods sitting and viewing a computer monitor.
• May require work on non-traditional shifts.
• Schedule flexibility to include working weekends and/or evenings and holidays (rare occurrence )as required by the business for 24/5 operations.