Senior Security Architect

Senior Security Architect

Vacancy expired!

JOB TITLE: Senior Security Architect
POSITION: Contract 24 (Months)
LOCATION: Albany NY - Onsite Role
Client is looking for an experienced senior security engineer/architect that will design, configure, implement, and support security controls in a growing enterprise environment. The security engineer responsibilities will include leading security projects involving LAN, WAN, IoT, OT, Office 365, Datacenter, Wireless, Cloud, endpoints etc
Job Duties:

• Provide security architectural recommendations and associated controls.
• Examine current firewall policies for completeness and accuracy.
• Configure IDS/IPS security policies.
• Assess Active Directory security roles and policies.
• Troubleshoot level 3 security related issues.
• Architect and configure cloud security controls.
• Monitor SEIM, Armis, and Secureworks.
• Respond to security incidents.
• Analyze the network and implement solutions to increase uptime efficiency and security.
• Work with vendors to integrate security platforms into FDNY infrastructure.
• Configure security policies in Office 365, Web Proxy, and CASB.
• Configure security policies in DNS and WAF.

• A minimum of a bachelor's degree in computer science, information technology or related field.
• At least 7 years of related experience.

• Minimum of 7 years Security Engineering experience
• Strong Network Security experience
• Work with vendors, carriers, and other technical groups to implement new security controls and troubleshoot existing controls
• Strong understanding of cloud security
• Experience with Next Generation Firewalls including Cisco, Palo alto, Fortinet, Forcepoint, etc.
• Experience with configuring DNS
• Strong background in WAFs
• Strong Identity and Access Management background
• Understanding of the various VPN technologies
• Familiarity with Infoblox to maintain public facing DNS services as well as IPAM
• Knowledge of resilient designs to ensure high availability
• Knowledge of security of wireless environment including controllers and APs.
• Knowledge of IPS/IDS design as standalone hardware or as a feature within firewalls
• Strong knowledge of security management tools to facilitate troubleshooting, i.e. Wireshark, Netbrain, Extrahop, Netwitness etc.
• Understanding of IoT and OT security
• Understanding of network protocols (EIGRP, OSPF, BGP, etc)
• Ability to create reports using KRI and KPI
• Strong project management experience