Overview: Security focused - Level 2/3 Security Network Engineer that can support Mid range device/service availability understanding of networking infrastructure and Network Security. In addition they will have a demonstrated knowledgeable in Route/Switch, IOS, IP, Firewall, and device and service Interoperability of the clients' network and able to assist in production outage issues as a Network Subject Matter Expert (SME). Shall support the following types of equipment: Network, Security and Service Devices consisting of Routers/Switches/Firewalls, including head-end Routers and network appliances in support of MPLS environment. This is an ITIL focused position. ITIL training/Certification, Cisco Certifications preferred and a focus in a Security area listed below under the position summary. We are looking for someone who can work 9am to 6pm if possible for additional hours of coverage. The resource will be available for 24x7 support.
Responsibilities: POSITION SUMMARY:
Responsible for the installation, modification, testing and servicing on data communications network equipment. Provides connectivity and network support to all network, services, company, and customers. Performs analysis of software, hardware, and network systems for processors, multiplexes, LAN/WAN communications and various transmission systems. Responds to assignments involving the installation, repair, and maintenance of network equipment. Conducts analyses and prepares reports on design and evaluation of current and future network development. Strong experience with an IT ticket management system. Responsible for Knowledgebase entries and updates.
Position details:
This role would focus on the following types of Security related products. The applicant does not need to have all areas but would need to have some and be willing to learn the other areas, Wireless, nCircle and NAC are the areas we are most interested in, but as stated, knowledge in any of the areas would be helpful:
- Intellinx
- MobileIron
- DLP TAPs
- Symantec Data Loss Prevention, End Point Protection and Disk Encryption
- ArcSight
- Cyber-Ark
- Wireless Security (WCS)
- Clean Access (NAC, CAS)
- eCase Enterprise
- Cisco Security Management ("CSM"): Administration of the CSM software for intrusion detection, intrusion prevention and Firewall rule deployment;
- Infoblox: Administration of the software (currently "Infloblox") used for management of CLEINT Internet Protocol ("IP") addresses and associated devices names;
- Cisco Access Control Systems ("ACS"): Administration of the ACS Servers used by CLEINT;
- Bomgar: Administration of the remote access software (currently "Bomgar") used to troubleshoot computing devices;
- nCircle Scanner: Administration of the scanner appliances (currently "nCircle Scanner") that collect threat and vulnerability data;
- 802.1x port authentication: Administration of the Client's 802.1x port authentication tools and processes;
- Entrust workstations certificates: Administration of Client's deployment of authentication certificates, currently "Entrust Certificates"; and
- Cisco PIX Firewall change auditing
- IPS/IDS
- MPLS support experience
- Palo Alto Firewalls and Content filtering
- Microsoft Threat Management Gateways (TMG)
- Creation of documentation and processes
- 24x7 on-call rotation
Provide "Incident Management" for the following services being provided under this Schedule:
A. perform performance monitoring and validation;
B. provide Incident Management, to include opening of "Incident" or work on already opened Incidents with the goal of resolving the Incidents, record, track, and update each case until resolution is achieved or Incident is transferred to another resolver group;
C. provide technical support consisting of "24x7x365" Technical Assistance Center ("TAC") services, Incident isolation, Incident resolution, configuration questions, and escalation management;
D. responsible for Communications to appropriate teams of Sev 1 and 2 Incidents
E. responsible for service restoration within SLA
F. accept tickets in Customer System as well as CompuCom internal systems
G. provide remediation information on all closed tickets;
H. shall be responsible for manufacturer escalation, communications and remediation of defects;
I. provide Incident classification to ensure that Incidents are correctly prioritized and routed to the correct service delivery team resources;
J. Check Incidents against known errors and problems so that any previously identified workarounds can be quickly located;
K. provide end-to-end Incident ownership and resolution for Incidents within CompuCom's scope of services;
L. manage all issues and coordinate resolution with Original Equipment Manufacturer ("OEM") if necessary, regardless of whether the issue was proactively or reactively identified;
Provide "Problem Management" including root cause analysis ("RCA"), post-Incident review, issues logging, optimization recommendations, and knowledge case update along with Change requests:
A. shall periodically review the existing information for level one (1) "Service Desk" knowledge cases, and provide new information on cases specific to the services under management and processes related to supporting those services;
B. provide reporting on the status of ongoing problem cases;
C. CompuCom shall deliver an RCA on all service impacting incidents (Sev1/Sev2) per SLA
D. shall, for all Sev1 Incidents, complete and deliver a debrief document of the Incident to the designated resource or team within SLA
E. shall provide configuration management of the services provided under this Schedule
F. Document and creation of all new CI's (configuration items)
G. shall follow Change Management policies,
H. shall attend change review/approval meetings ("CABs") as needed for approval and change contention assessment;
I. shall manage all open change requests and present all changes in infrastructure, which require CAB approval at the CAB meetings;
Qualifications: LEVEL OVERVIEW
The Specialist Level works on assignments that are moderately complex in nature where judgment is required in resolving problems and making routine recommendations. Responsible for translating customer needs into cohesive network recommendations and solutions. Provides significant support in research studies, analyses, design reviews, and technical briefings. Makes decisions on operating procedures, analytical approaches and workflow. May lead staff members in project tasks. Requires 5-7 years of related work experience, or Bachelor's degree, or technical training or equivalent combination of education and experience.
SPECIALITY
Two years experience installing and maintaining networks, network system administration and customer support required. Security, NOS, Desktop Applications andDesktop Operating systems beneficial. Must possess A+ certification and multiple Tier I products and Cisco certifications. Network+ and ITIL training and/or Certification a plus.
PRINCIPAL DUTIES AND RESPONSIBILITIES
- Works with other networking personnel to assist in design and implement total network systems solutions.
- Provides support and troubleshooting for complex multi-system installations.
- Provides support and troubleshooting of Firewalls and Firewall rule implementation
- Solves network software and hardware problems using testing tools and techniques.
- Reviews integrated systems design proposals for technical content. Identifies, analyzes, and evaluates alternative design solutions.
- Provides technical network integration support encompassing physical planning, configuration, and installation of network hardware and software.
- Provides support of MPLS Enterprise environment
- Performs necessary repairs on system that may include replacement of boards, loading and testing software applications, and restoring customer network operating systems.
- Incident and problem management and resolution.
- Follows an ITIL based approach for problem management including root cause analysis, post-incident review, issues logging, optimization recommendations, and knowledge case update.
- Assists with Manufacturer escalations and remediation of defects and managing third parties (for the purposes of problem resolution) on behalf of the client pertaining to incident management of network infrastructure.
- Assists to ensure design proposals meet customer needs. Monitors implementations for technical correctness for the highest level of customer satisfaction.
- Assists in developing customer support plans for complex networking systems.
- Assumes principal technical role in presentations by furnishing technical expertise and responding to customer inquiries on hardware and software.
- Develops information technology architecture and total systems solutions. Assists in designing quality control procedures to ensure the deliverables meet established design and performance goals.