Senior Network Security Engineer

Experience : A Minimum of 7 years in the FinancialIndustry, preferably in a Trading environment, is required for this position. The candidate must have experience in theArchitecture, Design, Implementation, and Maintenance of Trading-related Networkinfrastructure, such as: Market Data Distribution Networks, low-latency,ultra-low-latency and high frequency trading networks. The candidate must have the relevantknowledge and experience with Network Security systems in a financial tradingenvironment, including the Architecture, engineering, implementation andoperations of the different aspects of Network Security in a financial tradingenvironment. GeneralCompetency : - The candidate must be highly motivated. - Willing to work in afast-paced, constantly changing environment. - The candidate must have goodcommunication skills. - The candidate must be customerfocused. - Ability to work effectively andproductively with others, and still comfortable working independently. CoreTechnical Competency: - Architect, Design, Implement,and Troubleshoot Networks for different needs in the financial industry. - A solid background designing,managing, and troubleshooting diverse multi-protocol, switched and routedenterprise networks. - Expert level knowledge ofFirewall technology – including Architecture, design, implementation, operations,and troubleshooting. - The candidate must be verycomfortable configuring firewall rules and policies for both clientconnectivity and other security requirements of the network. - Ability to analyze firewalllogs and policies to troubleshoot client connections, and other network relatedsecurity issues on the network. - Ability to be able totroubleshoot network connectivity issues with both external and internalclients. - The candidate would Jointlywork with the Security Architecture Manager to perform weekly pre and postimplementation review of security operational activities. - Review active firewall policiesand proposed changes for insecure rule sets and coordinate with the customer toensure rules will support intended objectives - Work with the SecurityArchitecture Manager and the Network Manager to track the progress of assignedprojects and tasks to ensure SLA compliance. - Ability to handle complex networkengineering assignments with little supervision. - Analyze and resolve networkissues or as determined by monitoring tools and systems. - Respond to Trouble Tickets andperform scheduled activities related to network security. - The candidate must be good atdocumentation in general. Competent with working with network diagrams usingMicrosoft Visio. - Expert level knowledge andexperience with BGP and other routing protocols to be able to design andimplement various connectivity solutions to clients, vendors, and themanagement of the Trading network environment. - Strong ability to use packettracing technologies to troubleshoot network issues. - Strong knowledge of TCP, UDP,and higher layer protocols in order to understand application performance andtroubleshooting application issues on the network. - Create and maintain networkdevice configurations and relevant databases. SpecificTechnology Expertise: Strong and extensive knowledge of complexprotocols and technologies: Routing Protocols : BGP, OSPF, EIGRP, Static Routing, route-redistribution,summarization, Policy-Routing. Firewall Architecture, design, configuration,operations and Troubleshooting. Switching: Trunking, spanning- tree, dot1q, VLANs, VTP,Ethernet switching, multi-layer switching, vPC, MLAG. Multicast : PIM,IGMP, MSDP Network Services : TCP/IP, UDP, HSRP, DNS, DHCP, FTP, TFTP, NAT,TACACS, SSH, NTP, SYSLOG, TELNET, Network Management/Automation: SNMP, SYSLOG, IPSLA, NETFLOW, NetworkTelemetry, and Network automation tools. Security : IPSEC, VPNS, Firewalls and FirewallManagement and Analyzer systems, IDS systems, Packet Analysis: PICO CNEs, Wireshark, sniffers, packetcaptures, and packet decodes, Market Data packet decodes, FIX packet decodes. Vendorspecific technology expertise: - Cisco and Arista switching androuting platforms. - Fortinet Firewalls andFortiManager. - Juniper, Cisco, and CheckpointFirewall and security solutions. - PICO/Corvil Packet capturedevices and management platforms. - SevOne SNMP Management system. - HPNA Network Automation system. Education: A minimum of a bachelor’s degree isrequired. IndustryCertifications: Cisco, Arista, Juniper or FortinetCertifications in Network Security will be a big plus Accomplishment…