Senior Network Security Engineer

Senior Network Security Engineer II supports the ongoing design, implementation, operation and security of
the OCFO network and the supporting security infrastructure.
Duties & Responsibilities…
A. Ability to monitor and analyze data traffic patterns within the OCFO network infrastructure.
B. Identify network problems and recommend improvements to ensure optimal performance.
C. Ability to improve network quality regarding any degradation.
D. Ability to enhance security and knowledge of the latest security threats, worms and malware and advise
on how to deter them.
E. Ability to ensure reliability and stability of the work through the above actions.
F. Configure routers, switches, firewalls and other appliances in compliance with OCFO security standards
G. Monitor security measures in place within network perimeter, ensuring breaches do not occur and
information is safeguarded from unauthorized access.
H. Proactively oversee the activities involved in quality resolution of complex technical issues, responding
with an appropriate sense of urgency to problems escalating to Network Engineer’s level.
I. Coordinate with appropriate personnel to determine positive solutions that increase end user
satisfaction, following through to completion, and communicating resolution results; escalate to
management any situation that could adversely impact the service provided to the end user.
J. Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future
occurrences and improve customer service levels in an appropriate timeframe.
K. Provide network design services
L. Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical
approach to be used for proposed network changes.
M. Ensure adherence to network policies and procedures.
N. Manage production and disaster recovery networks and security
O. Ability to perform forensic and packet analysis.
P. Ability to configure and operate network security-focused monitoring and logging systems.
QUALIFICATIONS:
• Experience building large scale, multi-site network architectures
• Experience with secure remote access/WAN technologies (IPsec, VPN, etc.)

• Knowledge of network-based and system-level attacks and mitigation methods
• Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls.
• Experience with security routing protocols