Job Description :
Position: Network Security engineer
Location: Pleasanton, CA
Contract Duration: 6+ Months
Interview Process: 2 rounds of Webex
Visa: GC/ Citizens/ L2 EADs / H4 EADs / H1
Job Requirements Must To Have Good To Have
Experience • Overall 10+ years of experience in Network domain and 5+ years relevant experience with Checkpoint and ASA firewall operations and troubleshooting. Strong knowledge on Citrix NetScaler load balancer and Bluecoat proxy • VMware NSX Firewall Experience
Meraki Firewall Experience
Routing and Switching Experience
Cisco & Aruba Wireless Experience
Skills Security:
ASA 55xx Firewalls, Checkpoint 5000 and 6000 Firewall, Bluecoat Proxy S500
Load balancer:
Citrix NetScaler NSSDX 2000 Series
Routing & Switching:
Cisco Switch 2900, 3600, 3800, 4500 & 6500 Series
Cisco Router 4300 and 4400 Series
Protocols:
IP, TCP, UDP, SCTP Routing protocols: RIP, OSPF, EIGRP, BGP, IS-IS
Tools:
Smart Domain manager, Netcool, Cisco Works, NMS, CA eHealth, HP IONIX, ServiceNow, Visio, Excel
Process & Framework:
ITIL – Incident, Change and Problem Management
Visio – Network Design Stencils and experience creating network diagrams
Testing & Debug Tools:
Cisco Routers/Switches IOS debug; Wireshark; NMAP; Vulnerability scanners; Network Security Assessment tools
Certifications • Check Point Certified Support Specialist (CCSA)
CCNP Certification
CCDP Certification
CCDA Certification CCIE – Security
Job Responsibility:
10+ years of experienced Network Security engineer with support knowledge on Checkpoint, ASA firewall, Bluecoat Proxy, IDS and IP.
Strong Hands-on experience for fixing incident and troubleshooting problem and execute Complex changes and upgrade, migration, integration activities
Experience coordinating with OEM for product related fixed, ensure high uptime and standardization of configuration in devices
Provide Bluecoat & Checkpoint Security support to projects
Support and implementation of IDS/IPS systems and Security Management System
Maps network landscape, identify security problems (including misconfigurations) and provide solutions
Enterprise IDS/IPS experience particularly with Tipping Point, Create policies, log and data analysis, configurations, tests as needed to support the environment
Keeping abreast of industry trends, technology innovation, and changing customer requirements to help with the continual service improvement process
Demonstrate deep expertise in technical and security process
Responsible for designing customized network security architectures in Large or Enterprise and complex environments.
Assess network infrastructure and applications for customers in order to ensure compliance with best practices and standards.
Checkpoint Firewall:
Extensive work experience with Check Point based security solutions involving rule migrations from Fortinet, Juniper and Palo Alto deployments.
Deployed Check Point firewall solutions in standalone and distributed mode on software releases R77 and R80.
Check Point firewall rule debugging using “fw monitor”, tcpdump and SmartConsole tools.
Experience deploying Check Point firewall clusters using both VRRP and ClusterXL technologies.
Experience working with Check Point VSX and vSec firewalls for Microsoft Azure and Amazon AWS deployments.
Experience working with Endpoint Security products, deploying Check Point Endpoint Security solutions such as Full Disk Encryption, Media Encryption, Document Security, Anti-malware, Anti-ransomware, Anti-bot and SandBlast.
Responsible for providing documented recommendations to customers to comply with security standards or regulations such as PCI, SOX and ISO.