Network Security Engineer
San Diego, CA

Job Description

Job Description

Position Summary

The position of Network Security Engineer is established for the maintenance, enhancements to and

operations of the network and security infrastructure environment within the credit union. The

Network Security Engineer is the primary technical expert (SME) and is responsible for providing

essential input to technology selection and implementation decisions. As the network SME this role

is also responsible for mentoring and cross-training staff to ensure resource redundancy. Maintains

service level standards as set by the organization.

Essential Duties and Responsibilities

Leads the design, configuration, implementation and maintenance of all network switches,

routers, load balancers, firewalls, Web Application Firewalls, IDF/IDS, web filtering and other

various network appliances.

Ensures proper version/patch levels as well as adherence to compliance regulations and security

policies.

Performs operations of all Local Area Network (LAN) and Wide Area Network (WAN)

environments, performance monitoring, and Disaster Recovery (DR) planning and testing.

Performs in the role of Primary Network Security Engineering SME (Subject Matter Expert) to

provide technical expertise to peers, management, and other infrastructure team members.

Serves as the primary technical lead for all network Security projects.

Works in close alignment with the IT Architect to direct the design and implementation of current

and future technologies to ensure they deliver on all requirements.

Ensures delivery of efficient solutions that wherever possible reduce both complexity and

operational overhead.

Performs ongoing performance tuning, hardware upgrades and reconfigurations, and resource

optimization as required.

Actively monitors network health across all sites, identify and propose solutions to potential

problems/issues before they occur.

Configures and supports network services, including but not limited to: FTP, Web Services, and

remote access.

Acts as primary technical liaison with the IT Security team, focused on securing the network by

implementing firewall, network access and monitoring controls.

Network Security Engineer

Created May 2018 Page 2 of 3

Creates and maintains documentation of hardware and software installations, configurations and

network diagrams.

Provides mentorship and cross-training to the Network and Systems Engineers

Works with the business to deliver solutions that meet their requirements. Leverages existing and

emerging technologies to develop solutions to improve the performance of the overall network

security infrastructure.

Ensures the highest level of network uptime via proactive monitoring, system upgrades and

enhancements.

Provides review and QA of Network Engineering work to ensure accuracy and consistency.

Collaborates with network architect and infrastructure management on large scale initiatives,

providing SME guidance and direction.

Performs setup and maintenance of test environments to explore new networking ideas or projects

to improve current network infrastructure.

Works with vendors for quotes for equipment, purchases and consulting.

Acts as primary technical resource for network Disaster Recovery planning and testing.

Researches and recommends innovative and, when possible, automated approaches for system

administration tasks.

Supports security, audit and compliance activities and projects.

Other Duties and Responsibilities

Perform additional task or special projects as assigned.

Provide after hours on-call support.

Occasional travel.

Participate in AML/BSA compliance training as assigned. Adhere to credit union

AML/BSA policy and procedures including CTR rules and form preparation, identify and

refer suspicious activity to the Compliance Department, perform OFAC comparisons, and

properly identify individuals in accordance with Branch Operations procedures.

Physical Demands and Work Environment

The physical demands described here are representative of those that must be met by an employee to

successfully perform the essential functions of this job. Reasonable accommodations may be made to

enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to use hands to finger, handle,

or feel objects, tools, or controls and talk or hear. The employee is frequently required to stand and reach

with hands and arms. The employee is occasionally required to walk; sit; climb or balance; and stoop,

kneel, crouch, or crawl.

The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by

this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the

ability to adjust focus.

The noise level in the work environment is usually moderate.

Minimum Qualifications (Education, Experience, Skills)

BS in a technical field such as computer science or 4 years' additional relevant experience.

Network Security Engineer

Created May 2018 Page 3 of 3

CCNP, CISSP and ITIL or equivalent vendor/industry certifications.

10+ years of expertise with top tier networking technologies and vendors such as Cisco, F5,

Palo Alto.

7+ years of expertise managing connectivity circuits and vendors.

7+ years of experience in heterogeneous enterprise network environment.

5+ years of experience with VoIP telecom technologies and systems.

Excellent organizational skills, ability to multi-task and work on multiple projects.

Excellent verbal and written communication skills.

The position of Network Security Engineer is established for the maintenance, enhancements to and operations of the network and security infrastructure environment within the credit union. The Network Security Engineer is the primary technical expert (SME) and is responsible for providing essential input to technology selection and implementation decisions. As the network SME this role is also responsible for mentoring and cross-training staff to ensure resource redundancy. Maintains service level standards as set by the organization. Essential Duties and Responsibilities * Leads the design, configuration, implementation and maintenance of all network switches, routers, load balancers, firewalls, Web Application Firewalls, IDF/IDS, web filtering and other various network appliances. * Ensures proper version/patch levels as well as adherence to compliance regulations and security policies. * Performs operations of all Local Area Network (LAN) and Wide Area Network (WAN) environments, performance monitoring, and Disaster Recovery (DR) planning and testing. * Performs in the role of Primary Network Security Engineering SME (Subject Matter Expert) to provide technical expertise to peers, management, and other infrastructure team members. * Serves as the primary technical lead for all network Security projects. * Works in close alignment with the IT Architect to direct the design and implementation of current and future technologies to ensure they deliver on all requirements. * Ensures delivery of efficient solutions that wherever possible reduce both complexity and operational overhead. * Performs ongoing performance tuning, hardware upgrades and reconfigurations, and resource optimization as required. * Actively monitors network health across all sites, identify and propose solutions to potential problems/issues before they occur. * Configures and supports network services, including but not limited to: FTP, Web Services, and remote access. * Acts as primary technical liaison with the IT Security team, focused on securing the network by implementing firewall, network access and monitoring controls. Network Security Engineer Created May 2018 Page 2 of 3 * Creates and maintains documentation of hardware and software installations, configurations and network diagrams. * Provides mentorship and cross-training to the Network and Systems Engineers * Works with the business to deliver solutions that meet their requirements. Leverages existing and emerging technologies to develop solutions to improve the performance of the overall network security infrastructure. * Ensures the highest level of network uptime via proactive monitoring, system upgrades and enhancements. * Provides review and QA of Network Engineering work to ensure accuracy and consistency. * Collaborates with network architect and infrastructure management on large scale initiatives, providing SME guidance and direction. * Performs setup and maintenance of test environments to explore new networking ideas or projects to improve current network infrastructure. * Works with vendors for quotes for equipment, purchases and consulting. * Acts as primary technical resource for network Disaster Recovery planning and testing. * Researches and recommends innovative and, when possible, automated approaches for system administration tasks. * Supports security, audit and compliance activities and projects. Other Duties and Responsibilities * Perform additional task or special projects as assigned. * Provide after hours on-call support. * Occasional travel. * Participate in AML/BSA compliance training as assigned. Adhere to credit union AML/BSA policy and procedures including CTR rules and form preparation, identify and refer suspicious activity to the Compliance Department, perform OFAC comparisons, and properly identify individuals in accordance with Branch Operations procedures. Physical Demands and Work Environment The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.