Network Security Engineer

Company

SMS Datacenter is a growing IT MSP for Managed Services, Colocation, Networking, Private Managed Cloud, and Help Desk. We are a team of engineers and technicians who tackle new projects, challenges, and issues every day, designing and supporting users’ systems and networks so they can focus on their businesses. If you enjoy busy days of working with fellow IT professionals to solve problems and create long-term solutions, and you meet our open position's requirements, then apply to join the team!

Description

We are looking for a Senior Network Security Engineer

to join our network engineering and design team. You should be strong in Palo Alto firewall security, Cisco switching, and enterprise network architecture. This is a fully remote position that is open to US citizens and other permanent residents residing in the US only. Working hours will follow UTC-7 business hours, with a rotating on-call schedule.

Responsibilities

Configure and troubleshoot Palo Alto firewalls and other network devices

Design and deploy functional networks (LAN, WLAN, WAN)

Troubleshoot networks on internal and customer environments independently and with other engineers

Implement customer services according to project requirements and best practices

Translate security and compliance requirements into practical network architecture, configurations and documentation

Support monitoring with SNMP and other products

Create and maintain complete technical documentation, drawings, and SOPs

Communicate with users and colleagues professionally

Fully track time and work done on internal and customer tickets and projects

Suggest improvements to network performance, capacity, and scalability

Participate in rotating on-call and escalation schedules

Perform other job-related duties as necessary

Requirements:

7+ years of professional network engineering experience, including at least 3 years designing and architecting enterprise network environments

Strong experience designing and securing enterprise networks, including segmentation, VLANs/VRFs, routing, switching, firewalls, VPNs, wireless, and network access control

Strong Palo Alto firewall experience, including security policies, NAT, segmentation, logging, and security services

Experience with Cisco switching and routing and enterprise wireless, preferably Aruba

Experience with Cisco ISE or equivalent NAC technologies, including 802.1X

Experience troubleshooting complex Layer 2/3 and security/network infrastructure issues

Preferred Candidates Will Have:

Experience designing and securing Azure network infrastructure and hybrid cloud connectivity

Experience designing and implementing network security controls aligned with NIST 800 and/or CMMC requirements, including deep understanding of network segmentation, boundary protection, secure communications, access control, encryption, logging, monitoring, and secure system architecture

Experience implementing controls for CUI environments and maintaining technical documentation/evidence supporting security assessments

Ability to design network architectures that enforce least privilege, segmentation, secure management, and controlled communications

Expertise with BGP design and support for multi-tenant environments

Experience in MSP, multi-customer, or managed-services environments

CCNP, CCIE, PCNSE, PCNSC, CISSP, or equivalent real-world knowledge

Compensation and Benefits:

Selected candidates' job grade and starting salary will be determined by the evaluation of factors including relevant technical and soft skills, knowledge, and geographic location. Total annual compensation for this position is expected to be $120,000 to $150,000.

Employees who complete the first 90 days of employment will be eligible for Paid Time Off of up to 10 vacation/personal days, 5 sick days, birthdays off, and 8 company holidays each year.