Sr. Infrastructure Engineer

Position: Sr. Infrastructure Engineer 

Location: Atlanta, GA - Must be onsite in Atlanta in September

Duraation: 06+ months

Phone and skype

**This person will be working on multiple projects within the organization daily and weekly. So must be someone that has experience with managing multiple projects at one time. Will be remote for now but ideally someone local so that when they do come back to the office they will be able to. Timeframe is open right now but shooting for September to be back in the office. 
The Network & Security Specialist will work within a team to support the business globally. The successful candidate will work closely with senior members of the Network Tribe to deliver top operational service as well as project delivery. The ability to communicate effectively with other teams (technical and non-technical) through clear documentation is very important to this role, as such we would expect the successful candidate to provide evidence of previous work if selected for interview.

Key responsibilities

• Assist the Network & Security Team Lead to manage the data network costs, by ensuring 3rd party network costs are appropriate for services provided.
• Assist the Network & Security Team Lead to ensure data links contracts and maintenance are all fit for purpose, kept up to date and cancelled promptly when appropriate.
• Act as a technical contact for key technical areas and an ambassador for the team.
• Manage the provision of services from third-party infrastructure service suppliers as assigned.
• Provide estimates on costs for projects. These include resource estimates as well as hardware and services.
• Ensure that the operational service is maintained resulting in zero downtime through constant management of the network & security environment

Key requirements

• Bachelor’s Degree with 7 -10 years of IT experience
• Strong Network and Security background, with strong analytical and problem-solving skills and a can-do attitude for delivering IT support
• Proven technical solution design skills, and a good understanding of technology developments.
• Ability to demonstrate excellent technical and business focused documentation skills.
• Good knowledge of project management practices, project delivery and timekeeping experience.
• Strong knowledge of e-Commerce environments and Load Balancers, BIG IP F5 LTM, GTM and APM.
• Excellent knowledge of Cisco IOS, supporting Routers and Switches and at least CCNP certified
• Excellent knowledge of Checkpoint Smart console, FW1, ideally CCSA qualified.
• Proxy experience preferably Bluecoat
• Excellent knowledge of Cisco equipment within HP blade enclosures (C Class)
• Experience with vendor management and network carrier procedures.
• Ability to demonstrate excellent technical and business focused documentation skills.
• DNS/DHCP (ideally using Infoblox devices)

Experience with following is beneficial:

• Routing protocols in OSPF and BGP
• Wireless technologies (Access Points, Controllers, OEAPs)
• APC UPS, Physical Rack Hardware, and site monitoring
• Network Monitoring (SolarWinds/ NetMRI)
• Good Knowledge of Cisco NexOS
• Exposure to virtualized environments utilizing VMWare, Thin Client (Citrix), connection broker.
• Firewall technologies (Juniper, Checkpoint, ASA)
• zScaler
• Citrix NetScaler (SDX)
• Microsoft Azure (Networking – ExpressRoute, LB, Gateways, WAG, VNets, NSGs)

Experience with the following technologies is desirable:

• QoS, PBR
• Cisco (DMVPN/IPSec)
• Imperva WAF
• F5 APM and ASM, iRules
• Remote Access incl RSA SecureID and Radius authentication
• Linux administration
• Knowledge of HP blade enclosures (C Class)
• Cloud technologies, Azure, AWS etc
• Automation, Puppet, Chef, Cisco ACI etc
• Scripting, Java, PowerShell, Python etc

Various US Business Projects and Basecamp

Technologies:

• Checkpoint Gaia
• Operational knowledge of Azure
• Zscaler proxy & PAC files
• Infoblox DDi
• F5 Big IP LTM

Types of Requests:

• Configure firewall rules & troubleshoot existing rules.
• Troubleshoot website connectivity via proxy & azure.
• Assist with network issues internal & third party vendors.
• Add, delete, modify DNS records in Infoblox.
• Support emergency outages P1 & P2 issues.

TLS Upgrade Project:

The project is in the ‘Direction’ phase so the list may change:

• Document a reference TLS 1.3 architecture
• Produce inventory of network devices, including TLS 1.3 support status
• Define actions required to ensure all relevant network devices support TLS 1.3
• Produce inventory of applications currently running on TLS 1.2 or below and cipher suites supported
• Define actions required to upgrade a simple pilot application (to be decided) to TLS 1.3
• Define actions required to upgrade a complex pilot application (to be decided) to TLS 1.3
• Upgrade network devices to support TLS 1.3
• Define actions required to disable support for TLS version 1.2 and earlier on network devices