Title:  Lead Network Security Engineer - Remote

Summary:

Plan, engineer, configure, implement, and troubleshoot security and network infrastructure necessary to maintain and secure global enterprise network. Provide subject matter expertise for a variety of technology projects with an emphasis on security technology. Partner with internal and external business units as necessary to provide security assurance against cyber attacks, to include denial of service campaigns, web defacement, unauthorized access, data loss and other cyber activities that could negatively impact the good name and reputation of Donnelley Financial Solutions and our customers. Provide operational support for security and network infrastructure. Proactively identify security vulnerabilities and mitigation opportunities within the security and network infrastructure. Deliver an Ideal Customer Experience by always executing with quality and excellence. Demonstrate an aptitude for maintaining strong security market awareness as well as to recommend, implement, and manage cutting-edge technologies.

Responsibilities:

•    Conduct high-level and low-level designs for Enterprise security and network infrastructure projects.
•    Implement Enterprise infrastructure changes.
•    Interact with partner organizations/departments to design network or system solutions for DFIN Enterprise infrastructure. make recommendations on investments for network hardware and services.
•    Evaluate new security and network technologies and recommend future strategy to management.
•    Experience in architecture and design of a global enterprise network.
•    Actively participate and identify changes needed in Enterprise infrastructure strategy reviews, design sessions and configurations necessary to achieve the technology organization goals.
•    Analyze network & system response and determine tuning recommendations to improve performance, adhere to capacity management expectations, and provide performancemanagement reporting.
•    Manage effective issue identification and resolution processes; serve as a senior escalation point for all Enterprise network and security operations issues with a degree of quality that results in absolute root-cause determination and drive vendor partners to provide quality assurances by requiring immediate bug fixes, software updates, etc., as necessary to ensure an Ideal Customer Experience at all times.
•    Perform 24x7x365 advanced tier 1-3 support, to include but not limited to: troubleshooting, off-hour maintenance activities, problem resolution, and on-call rotation while ensuring adherence to the Donnelley Financial Solutions Change Management policy.
•    Create and maintain documentation as it relates to network systems, design, configuration, support, and processes for all supported network infrastructure. Create and maintain Disaster Recovery plans; ensure they are tested and updated regularly.

 

Responsibilities (cont.):

•    Participate in the on-call rotation.
•    Assist with defining requirements in support of budget plans and make recommendations for ways to improve performance and reduce costs. Develop business cases that support changes to network and system infrastructure.
•    Develop network and system performance tools and integrate them into the existing infrastructure. Design an effective test plan for any new/changed service provider infrastructure.
•    Ensure communication of process and procedure changes to key stakeholders.
•    Support identification and collection of metrics and performance reporting processes. Determine Key Performance Indicators and infrastructure standards · Identify process improvement areas and develop the improvement initiatives.
•    Research current industry technology to better facilitate vendor and partner communications
•    Subject Matter Expertise (SME) for relevant technologies.
•    Requires minimal supervision to perform job duties.
•    Develop and deliver cross-training to other members of the team. Participate in and encourages a knowledge-sharing environment both within and outside the department.
•    Assist in budget planning process.
•    Establish and maintain working relationships with the technical, business, customers, associates, sourcing counterparts and vendors as necessary to proactively identify needed changes.
•    Participate in process improvement initiatives.
•    Actively participate in industry/vendor forums to guide product development activities.
•    Manage individual workload and deliver to agreed-upon milestones.

Qualifications:

The Lead Network Security Engineer is expected to demonstrate technical knowledge of the skills listed below.  The technical skills will depend on his/her specific responsibilities within the organization.

Minimum 6 to 8 years relevant work experience
 

Technologies: 

Firewall: Minimum of 6 years of working knowledge - Palo Alto Networks, Cisco ASA, Checkpoint Firewall
Routers and Switches: Minimum of 6 years of working knowledge - Cisco all models 
VPN: Minimum of 6 years of working knowledge - IPSec/SSL-based solutions, Site to Site VPN
Intrusion Detection and/or Prevention: Minimum of 2 years of working knowledge - Radware Defense Pro
Load balancers: Minimum of 6 years of working knowledge - Radware LB, F5 LB
NAC: Minimum of 4 years of working knowledge
O/S: Minimum of 2 years of working knowledge - UNIX (Solaris, BSD); Linux, Windows variants
Scripting Languages: Minimum of 3 years of working knowledge - Perl, Bash, Ruby, Python, Terraform
Application Software:  Minimum of 2 years of working knowledge - Syslog, MySQL
Network tools: Minimum of 6 years of working knowledge - TCP Dump, Wireshark, Iperf, Solarwinds
Network Protocols:  Minimum of 6 years of working knowledge - TCP/IPv4, TCP/IPv6; Routing protocols such as BGP, OSPF.
Business Applications: ServiceNow, Zendesk, 
Office Automation:  Minimum of 6 years of working knowledge - Microsoft Outlook, Word, Excel, PowerPoint, MS-Project and Visio, GSuite, Lucid Charts
Minimum 4 years of working knowledge of Azure, AWS and SaaS products.
Travel required (+/-5%)

Preferred Skills:

• Bachelor’s degree in related technical preferable
• Understanding of the business and/or industry
• Experience re-engineering / process improvement
• Knowledge of SD WAN is preferred.
• Strong change management skills; change agent
• Excellent problem solving / analytical skills and knowledge of analytical tools
• Excellent written and verbal communication skills
• Ability to create / define metrics that accurately reflects the current state of a given process
• Experience supporting mission-critical infrastructure in a fast-paced environment
• CCNP preferable but not required
• PCNSE Preferable but not required 
• Any other certification is a plus