Network Sre

Who is Forcepoint?

Forcepoint simplifies security for global businesses and governments. Forcepoint’s all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. 20+ years in business. 2.7k employees. 150 countries. 11k+ customers. 300+ patents. If our mission excites you, you’re in the right place; we want you to bring your own energy to help us create a safer world. All we’re missing is you

**Responsibilities**:

- Design, write and deliver software to improve the availability, scalability, latency, and efficiency of Forcepoint’s services
- Influence and create new designs, architectures, standards and methods for large-scale distributed systems
- Collaborate with a world-class engineering team to propose features that solve recurring patterns of customer complaints
- Engage in service capacity planning and demand forecasting, software performance analysis and system tuning
- Participate in on call rotation, Participate, collaborate and provide guidance in retrospectives.
- Find scalability bottlenecks and areas for performance improvements
- Strong team player with a high degree of flexibility.
- Systematic problem-solving approach, coupled with a strong sense of ownership and drive.

**Requirements**:

- Ability to write programs/code using at least one modern programming language, preferably Python, Go, Perl or Ruby
- Strong fundamentals of Cloud Architecture and Cloud Technology offerings (Docker, Kubernetes, Micro-services etc.)
- Understanding of IaaS and PaaS technology stacks
- Understanding of Monitoring and Observability principles, with experience of either deploying or using a monitoring/observability platform such as NewRelic, DataDog, Graffana, Solarwinds, Zabbix, LogicMonitor etc.
- Understanding of Infrastructure as Code principles, having an experience with IaC tool-stack such as Terraform
- Strong grasp on Configuration Management tool-stack, such as Ansible, Chef, Puppet etc.
- Strong understanding of CI/CD pipelines and its related tool-stack (Git, Jenkins, etc.)
- Automation driven, service availability focused, with an understanding of Incident Management, RCA and Change Control practices
- Exposed to Agile methodologies and practices
- Experience with Amazon Web Services and/or any other public cloud
- Blend of both Development and SRE mindset (i.e. software and infrastructure)
- Networking: knowledge and understanding of network theory, such as different protocols (TCP/IP, UDP, ICMP, etc), MAC addresses, IP packets, DNS, OSI layers, and load balancing
- Experience with algorithms, data structures, complexity analysis and software design.
- Systematic problem-solving skills, coupled with a strong sense of ownership and drive.
- Procedural and troubleshooting documentation skills
- ISP Services: Have experience working with ISP vendors and Data Centers to install and configure various network circuits types such as Direct Internet Access (DIA), MPLS, and VPLS circuits. Experience configuring and debugging BGP peering sessions with service provides is highly desirable
- Network Routing and Switching Services: Be well versed in IPv4/IPv6 networking design and implementation, exterior gateway routing protocols such as BGP and interior gateway routing protocols such as EIGRP and OSPF along with static routing and multicast routing. In addition, be familiar with layer 2 switching design, configuration and monitoring. Specific equipment configuration experience would include Juniper, Cisco and HP/Aruba network devices. Have knowledge of Network Access Control (NAC) technologies and implementation is desired
- Next Generation Firewall Services: Be well versed in Next Generation firewall technologies to include deep packet inspection, policy optimization, Application Monitoring and Intrusion Detection. The ability to configure, monitor and debug firewall policy is highly desirable.
- VPN and Remote Access Services: Be well versed in creating VPN design and configuration for web-based VPN, client-based VPN and site to site VPN connectivity using SSL/IPSEC technologies. Knowledge and experience with Suite B Cryptology and CSfC technologies and implementation is desirable
- Cloud Services: Familiar with AWS and Azure cloud services network configuration to include setting up VPN and AWS Direct Routes and Azure Express Routes and basic network configuration for these cloud providers
- Wireless Services: Versed in the design, implementation. And monitoring of Wireless services to includes controller-based Access Points and two factor authentications for Wireless access. Experience using Aruba wireless technologies a plus to include Mobility Master, ClearPass, Airwave, etc.
- Load Balancer Services: Extremely knowledgeable in load balancer design and implementation monitoring and analysis along with the various load balancer technologies. Experience in F5 load bala