Senior Network Security Engineer - Part-Time

Experience:       

A Minimum of 7 years in the FinancialIndustry, preferably in a Trading environment, is required for this position.  The candidate must have experience in theArchitecture, Design, Implementation, and Maintenance of Trading-related Networkinfrastructure, such as: Market Data Distribution Networks, low-latency,ultra-low-latency and high frequency trading networks.  The candidate must have the relevantknowledge and experience with Network Security systems in a financial tradingenvironment, including the Architecture, engineering, implementation andoperations of the different aspects of Network Security in a financial tradingenvironment.

GeneralCompetency:

-         The candidate must be highly motivated.

-         Willing to work in afast-paced, constantly changing environment.

-         The candidate must have goodcommunication skills.

-         The candidate must be customerfocused.

-         Ability to work effectively andproductively with others, and still comfortable working independently.

CoreTechnical Competency:

-         Architect, Design, Implement,and Troubleshoot Networks for different needs in the financial industry.

-         A solid background designing,managing, and troubleshooting diverse multi-protocol, switched and routedenterprise networks.

-         Expert level knowledge ofFirewall technology – including Architecture, design, implementation, operations,and troubleshooting.

-         The candidate must be verycomfortable configuring firewall rules and policies for both clientconnectivity and other security requirements of the network.

-         Ability to analyze firewalllogs and policies to troubleshoot client connections, and other network relatedsecurity issues on the network.

-         Ability to be able totroubleshoot network connectivity issues with both external and internalclients.

-         The candidate would Jointlywork with the Security Architecture Manager to perform weekly pre and postimplementation review of security operational activities.

-         Review active firewall policiesand proposed changes for insecure rule sets and coordinate with the customer toensure rules will support intended objectives

-         Work with the SecurityArchitecture Manager and the Network Manager to track the progress of assignedprojects and tasks to ensure SLA compliance.

-         Ability to handle complex networkengineering assignments with little supervision.

-         Analyze and resolve networkissues or as determined by monitoring tools and systems.

-         Respond to Trouble Tickets andperform scheduled activities related to network security.

-         The candidate must be good atdocumentation in general. Competent with working with network diagrams usingMicrosoft Visio.

-         Expert level knowledge andexperience with BGP and other routing protocols to be able to design andimplement various connectivity solutions to clients, vendors, and themanagement of the Trading network environment.

-         Strong ability to use packettracing technologies to troubleshoot network issues.

-         Strong knowledge of TCP, UDP,and higher layer protocols in order to understand application performance andtroubleshooting application issues on the network.

-         Create and maintain networkdevice configurations and relevant databases.

SpecificTechnology Expertise:

Strong and extensive knowledge of complexprotocols and technologies:

Routing Protocols:  

BGP, OSPF, EIGRP, Static Routing, route-redistribution,summarization, Policy-Routing. Firewall Architecture, design, configuration,operations and Troubleshooting.

Switching:   

Trunking, spanning- tree, dot1q, VLANs, VTP,Ethernet switching, multi-layer switching, vPC, MLAG.

Multicast:

 PIM,IGMP, MSDP

Network Services:

 TCP/IP, UDP, HSRP, DNS, DHCP, FTP, TFTP, NAT,TACACS, SSH, NTP, SYSLOG, TELNET,

Network Management/Automation:

SNMP, SYSLOG, IPSLA, NETFLOW, NetworkTelemetry, and Network automation tools.

Security:

IPSEC, VPNS, Firewalls and FirewallManagement and Analyzer systems, IDS systems,

Packet Analysis:

PICO CNEs, Wireshark, sniffers, packetcaptures, and packet decodes, Market Data packet decodes, FIX packet decodes.

Vendorspecific technology expertise:

-         Cisco and Arista switching androuting platforms.

-         Fortinet Firewalls andFortiManager.

-         Juniper, Cisco, and CheckpointFirewall and security solutions.

-         PICO/Corvil Packet capturedevices and management platforms.

-         SevOne SNMP Management system.

-         HPNA Network Automation system.

Education:

A minimum of a bachelor’s degree isrequired.

IndustryCertifications:

Cisco, Arista, Juniper or FortinetCertifications in Network Security will be a big plus

Accomplishments:

Candidates should provide some keyjob-related accomplishments in their current or previous roles.