Security Engineer II

Information Technology

The Information Technology team supports almost every area of the Bank. Utilizing technology solutions to collect and interpret data for business strategies and providing infrastructure for all business operations. Puneet Rawal, the Chief Information Officer for Credit One Bank, explains why an IT professional should join his team by bringing up one word repeatedly: Growth, with a capital G. “Individuals who have growth aspirations for their career, will not find a better place. You want to be in a growing company that can support your growth. We provide that unique mix.” Click here to learn more about the IT team.

Position Summary

The Security Engineer II will be a key contributor to the Network Security posture of the organization. This position will support the enterprise network team as well as the security of a global corporate network with locations around the world. The ideal candidate will be self-motivated and articulate familiar with Cisco, Palo Alto, and Meraki equipment (router, switches, firewalls, and VPN), and related network technologies, and have a proven history of using management and monitoring tools.

Essential Job Functions:

• Will need to provide assistance to the organization team for architectural design, and deployment strategies as well as uptime and maintenance of Credit One Bank's network security including firewalls, network security systems, local area networks, and wide area networks.
• Work with the team to create network security design diagrams based on project requirements.
• Guide the networking team to troubleshoot, perform root cause analysis, and identify, isolate, and resolve technical issues in a timely manner!
• Participate in proactively investigating, troubleshooting, and resolving issues by working daily, weekly, and monthly checklists and system health checks.
• Perform routine maintenance such as patching of network devices and network security systems.
• Evaluate and report on workload and capacity of the environment and provide recommendations for capacity.
• Research new or existing technologies, propose, design, develop, and implement solutions to improve products and services.
• Configure network monitoring tools to monitor the network environment.
• Monitor and review network security logs and report anomalies.
• Attend meetings and provide input and architectural recommendations at design review sessions.
• Help drive initiatives and new projects.
• Collaborate with IT and other departments on projects.
• Suggest, support, and implement process improvements.
• Full-time position with on-call duties
• Perform other duties as assigned.

Position Requirements:

• BS/BA degree in a related technical discipline
• 2+ years of experience managing firewall and VPN equipment (Palo Alto or similar Next-Generation Firewall experience highly regarded)
• 2+ years of experience using F5 load balancers in a multi-site environment (LTM, DNS)
• 3+ years of experience troubleshooting TCP/IP and Ethernet networks.
• Experience with configuring and troubleshooting Cisco Identity Services Engine
• Experience with configuring and troubleshooting VPN Posturing
• Experience with configuring and troubleshooting 802.1x
• Strong understanding of the OSI model
• Experience with configuring and troubleshooting BGP, MPLS, VPN, OSPF, HSRP, and VLAN
• Experience in generating and diagnosing network captures.
• Experience with network security systems such as Web Application Firewalls, and IDS/IPS systems
• Experience with disaster recovery strategies
• Experience with proxy systems and load balancers
• Understanding of compression and encryption technologies
• Knowledge of network security best-practices
• Must have the ability to work individually, within a team, with other groups, and with vendors.
• Must have the ability to communicate complex technical problems concisely and professionally to technical and non-technical audiences.
• Ability to work on many tasks simultaneously in a high-pressure environment.

Preferred:

• Understanding of or experience supporting web servers
• Understanding of virtualization technology