As Network Design Engineer - Security, You Will Be Doing:

Work collaboratively with the Engineering, Innovation & Technology, Technical Operations and Corporate IT departments to create, maintain, and enforce security plans and policies affecting the network and systems. Responsible for securing all information and information systems assets of the Company network infrastructure. 

Recommends policy for responding to security incidents. 

Research new and/or updated technologies as they become available that pertain to our environment. 

Performs regular vulnerability assessments. Performs security audits, helps ensure that customer SLAs are always met. Responds quickly to downtime situations. 

Assess security risks, compliance gaps & quantify overall security posture of platforms, systems and services. 

Supports test, troubleshooting and operational issues alignment with security designs and architectures. 

Interfaces with teams across the organization to ensure an efficient and effective security solution meets engineering/business needs and alignments. 

Ensure technology implementation and product development methodology aligns with information security policies and improves the security posture. 

Generate Work Request materials that accurately, thoroughly, and efficiently detail all work to be completed by Technical Operations, System Operations, and others.   

Assist and guide Network Technicians and Operations Engineers in the installation, configuration, turn up, and modification of network equipment. 

Participate in network planning and network deployment strategies. 

Create and implement Methods of Procedure and project work plans.  Must have a strong focus on quality and network sustainability. 

Support Service Provider threat mitigation platforms (DDoS), firewalls and VPN appliances (IPSec). 

Create detailed documentation of Armstrong’s network systems and topologies – new and existing. 

Support Armstrong’s Network Management Systems and help with additions/modifications as needed. 

Provide direction and guidance for policy and procedure creation related to Armstrong’s engineering Best Practices and network design. 

Other related tasks as assigned. 

What Sets You Apart:

2 - 5+ years as a Network Engineer, with a focus on network security, in a service provider or large enterprise environment.  A Bachelor of Science degree in Engineering or Computer Science from an accredited college or university is preferred.  Experience in network operations is a plus. 

Experience implementing Application Security Standards 

Experience with implementing Cloud Security Standards 

Experience with Vulnerability Management 

Experience with Data Loss Prevention (DLP). 

Experience with implementing & developing automation solutions. 

Understanding of security frameworks/protocols 

Solid understanding of the OSI model and IP Protocols (IPv4, IPv6, TCP/UDP/ICMP, DNS, DHCP) 

Experience with vulnerability scanning, security assessments, and risk analysis. 

Knowledge of security best practices in hardening and protecting cloud environments, networks, servers, endpoints, applications, and databases. 

Identify and remediate system, network, and application vulnerabilities; validate vulnerability scanning results and false positives; perform vulnerability assessments using vulnerability assessment tools. 

Experience with investigating security incidents and developing incident response plans. 

Must be able to demonstrate and apply strong design knowledge and understanding of IP networks to complete network designs and augments. 

Proficient knowledge and experience with various networking standards and protocols such as MPLS, DWDM, SONET, OSPF, EIGRP, ISIS, iBGP, eBGP Ethernet, VLAN tagging, spanning tree protocols, DNS, DHCP, NAT, CGN, HTTP, FQDN, SIP, MGCP, RTP, and others. 

Possess and demonstrate the ability to work independently under minimal supervision; must be a self-starter that can work on multiple projects simultaneously. 

Must have strong communications skills, both verbal and written, to communicate design criteria and project plans to others inside and outside the organization. 

Must be available to support the business when necessary, which includes overnight travel and/or non-standard shift assignments (maintenance windows). 

Cisco certification (or equivalent vendor certification) is preferred