GENERAL SUMMARY: 

Under general direction of IT Network Team Leader or the Sr. Security Engineering Manager, works closely with the other members of the team to execute and manage a comprehensive information security program. This includes the tactical management and configuration of the Network Security devices.  Focuses on securing the network perimeter through the operations of the firewall, virtual private networks (VPNs), intrusion detection system/intrusion prevention system (IDS/IPS), network access control (NAC), data loss prevention (DLP) and enterprise anti-virus solutions.    

PRINCIPAL DUTIES AND RESPONSIBILITIES: 

Provides security engineering support for the infrastructure and applications across multi-site enterprise and data center environments; including the evaluation, design, implementation and troubleshooting of security infrastructure technologies and solutions to ensure the confidentiality and integrity of Clients and customer assets. 

Protects and secures company resources in the cloud, virtual and physical infrastructures. 

Maintains and administers network security systems such as, but not limited to: 

• Network Access Control (NAC) 

• Encryption/Certificate Management Systems (SSL, HTTPS) 

• Firewalls 

• Intrusion Detection / Prevention Systems  

• Web Filtering 

• Data Leakage Protection Systems 

• Endpoint Protection/Detection/Response (EPP/EDR)  

VPN Assists in the design, install and support of security technologies such as Network Access Control, Encryption/Certificate Management Systems, Firewalls, VPN, Network and Host-Based IDS/IPS, SIEM, DLP, Wireless Encryption and Content Filtering. 

Assists in design and monitoring security for routers, switches, operating systems, and other technologies. 

Provides input in analysis of system logs to identify unauthorized user or access. 

Design and validate rules engineering for the various access control chokepoints such as firewalls, VPN etc. 

Provides in-depth customer support for information security incidents including internal violations, hacker attacks, virus and system outages. 

Assists in creating validation process such as alerts or procedural flows. 

MINIMUM REQUIREMENTS: 

• Bachelor's degree in business administration, computer science or a related field. 

• Five (5) years of network security systems support. 

• CISSP or CISM Certification 

• Any equivalent combination of education and/or experience may be substituted for the above. 

• Possession of a valid class C driver's license. 

REQUIRED KNOWLEDGE, SKILLS AND ABILITIES: 

• Knowledge of the principles and practices of a network systems design and implementation, including hardware, software, communications standards and documentation. 

• Knowledge of the principles and practices of business and public administration. 

• Knowledge of current network communications and access control security technology. 

• Ability to provide project management. 

• Ability to plan and develop time and cost estimates for network projects. 

• Ability to oversee and coordinate the work of technical personnel. 

• Ability to communicate clearly and effectively, both orally and in writing, at all levels within and outside the organization, and to provide technical documentation. 

• Ability to establish and maintain effective working relationships inside and outside the organization. 

DESIRABLE: 

• CEH, CEPT, or CPT Certification. 

• Cisco experience. 

• CCNA Certification. 

EFFORTS: 

• Works in an office environment. 

• May sit for prolonged periods of time. 

• Uses near-visual acuity in reading written documents. 

• Uses keyboard devices and computer monitors. 

• Uses substantial reasoning abilities in performing analysis and solving problems. 

• Exchanges information by phone, in writing and in person. 

• Drives to locations on Airport property.