Job Description :
Description:
Provide highly available network based security services to match business needs. In-depth operational experience providing authentication, authorization, and accounting (AAA) services and automated mac authentication bypass functionality are the key components for this role. The candidate will utilize strong communication skills as well as enterprise level understanding of network and security technologies to deliver solutions that are both technically sound and supportable.
Responsibilities:
Provide Level 2 support consistent with Network data and voice support models
Provide network based authentication, authorization, and accounting services
Implement and support an 802.1x capable network infrastructure
Understanding of PKI / certificate based authentication
Allow Mac Authentication Bypass (MAB) functionality through the use of the Great Bay Beacon appliance
Generation of custom rule sets for accurate profiling and network placement of client systems
Enterprise level experience designing, implementing, and operating the Cisco ACS 5.x platform
Experience with Cisco Firewall, VPN, and IPS/ IDS systems
Recommendations of system changes in support of operational needs and system efficiencies
Generation of technology documentation and diagramming with tools such as MS Word and Visio
Ensure network access control systems meet compliance and auditing requirements
Plan network changes
Resolve network problems
Participate in review meetings as required to support network implementation activities
Provide recovery and restoration of the network in event of a disaster or major incident
Security and Controls:
Comply and contribute to completing Security and Controls process regarding Network data and voice technologies
Technologies:
TACACS / Radius, AAA, Firewalls, VPN, Intrusion Prevention Systems, MAC Authentication Bypass, PKI, Dynamic routing, L2 / L3 Switching
Equipment:
Cisco Access Control Server 5.x, Great Bay Beacon, Cisco ASA Firewall, Cisco IPS Module, NNM, BMC suits, Loglogic, Netscout, RSA EnVision / Splunk Syslog servers, Orion monitoring tools