NETWORKING ENGINEER SECURITY

Job Title:

Your background

The role of Perimeter Security Production Services Specialistprovides support of Network infrastructure by detecting, responding, andrestoring issues related to Incidents with the primary focus on triageleadership of all business impacting incidents. This role is the key focalpoint for network stability and owns restoring any impacts to that stabilityregardless of where the root cause of the impact lies.

Shift and hours of work:

Each shift will be 12hrs, alternate week’s Wed will be an off day.

Shift Pattern A: Sun to Wed

Shift Pattern B: Wed to Sat

What you can expect

The technology areas of focus for the PerimeterSecurity Production Services Specialist includes edge-network security viafirewall and intrusion detection/prevention technologies. Production ServicesSpecialists are expected to be well versed in numerous networking protocols andexpands to other network security components, technologies and troubleshootingmethodology, including the use of proactive and reactive tools. The work isalways in alignment to the current and approved Network Services Standards, Incidentand Problem Management Policies & Procedures, governance and managementpolicies set forth by the firm.

This position will interface directly withinternal stakeholders and external suppliers/providers, architecture, productengineering, product management, and business management. At times, they mayinterface with various levels of senior management. Strong communication andproblem-solving skills are a must. The candidate must be able to work on theirown and successfully in team settings in various sizes and locations. Adherenceand use of standards, product sets, templates, systems, and artifacts are importantto the success of the individual, the department, and the firm at large. ThePerimeter Security Production Services Specialist will be considered a subjectmatter expert in their field and is expected to stay current with varioustechnologies, organizational goals, and industry trends to drive end to endvalue.

Required Skills:

· Minimum 8+ years’ experience in a Network Operations supportin the banking and finance industry.

· Extensiveexperience in configuring and troubleshooting the following Perimeter Security technologies:

o CheckPoint NGFW (R80+)

o Fortinet (FortiGate, FortiManager, etc)

o Palo Alto NGFW, Cisco Firepower, or Juniper SRX

o Mastery in NAT, Stateful Firewall concepts, HA andclustering protocols, FW policy management

o Solid Experience with IDS/IPS such as TrendMicroTippinPoint, IPS Signatures

o Tunneling protocols – SSL/TLS, IPSEC, GRE

· In-depth experience and understanding of network security technologies,principles, and practices such as in areas of DMZ and Internet Security.

· Well-rounded proficiency across multiple networksecurity technologies:

o Load Balancer - F5 LTM, GTM, iRules, SSLO, APM, NSXAVI

o DNS/DHCP/IPAM/NTP – Bluecat

o AAA - Aruba Clearpass, Cisco ISE

o Proxy - (Bluecoat, Skyhigh Web Gateway), DLP (AlteonFireEye), HTTP

· Strong foundation in Network Data Technologies – VLAN,TCP/IP, UDP, HA/failover protocols (VRRP, HSRP, etc.), ANYCAST, Routing andSwitching Protocols such as BGP, OSPF, STP, LACP, VPC, ARP.

· Experience and knowledge in digital certificates andpublic key infrastructure (PKI), certificate authority and trust chain, CRLs,OCSP, and secure deployment practices.

· Expertise in packet capture analysis using Wireshark,tcpdump/ssldump from L2 to L7 traffic flow.

· Broad experience using (both proactive and reactive)advanced tooling; Inclusive of but not limited to Splunk, SevOne, IBM Watson,Netscout, etc.

· Strong technical acumen and analytical skills withextensive experience in troubleshooting complex networking problems in amulti-vendor and multiple technology environment

· Excellent client interfacing skills, proven ability tomanage and set client expectations.

· Ability to thrive in a fast-­paced, high-performing, rapidlygrowing environment while balancing multiple, sometimes competing priorities.

· Excellent incident handling skills and ability toassess impact and urgency, and translate findings into actionable steps toresolution.

· Ability to make quick decisions and comfortable escalating tomanagement when required.

· Firm understanding of IT Service Management processes.

· Strong verbal and written communication skills andability to work with all levels of management.

· Self-starter/self-directed, organized and detailoriented.

· Demonstrates ownership: Is accountable and can holdothers accountable (professionally)

Desired Skills:

· Experience operating in follow-the-sun 24/7 globalsupport model

· Relevant Industry certifications in Network SecurityTechnologies

· Knowledge in ITIL best practices and Lifecycleprocesses

· Experience with automation tools such as Python,Ansible, Shell scripting, YAML, REST API, XML and JSON or Django, API calls(to ticketing systems and network devices), and other automation-basedplatforms.

· Experience with JIRA, Confluence, Agile framework& SCRUM ceremonies

· Possesses forward-thinking approach to riskidentification and mitigation.

· Understand configuration management with tools such asForward Networks and HPNA

· Basic Linux filtering skills

The Chief Technology Organization:

· Believes diversity makes usstronger so we can reflect, connect and meet the diverse needs of our clientsand employees around the world.

· Is committed to building aworkplace where every employee is welcomed and given the support and resourcesto perform their jobs successfully.

· Wants to be a great place forpeople to work and strives to create an environment where all employees havethe opportunity to achieve their goals.

· Provides continuous trainingand development opportunities to help employees achieve their career goals,whatever their background or experience.

· Is committed to advancing ourtools, technology, and ways of working to better serve our clients and theirevolving business needs.

· Believes in responsible growthand is dedicated to supporting our communities by connecting them to thelending, investing and giving them what they need to remain vibrant and vital.

What you will do

• Operational Support of Network Perimeter Security technologies
• Fortinet, Checkpoint, and Trend Micro
• Technical areas of focus include but are not limited to firewall, network address translation, routing, and intrusion detection/prevention systems
• Lead production support triage efforts for network infrastructure incidents, manage bridge line troubleshooting and appropriate team engagement, engage in technical research and troubleshooting, and escalate to next level of leadership as needed
• Identify service impact, interpret monitors, dashboards, and logs; Work with senior team members to validate impacts and communicate all impacts to internal stakeholders and leadership
• Provide status updates and technical detail for awareness communications, ensure accuracy of all communications sent, and ensure any necessary follow-ups are scheduled.
• Identify possible production failure scenarios, vulnerabilities, and opportunities for improvement, and take ownership of escalation.
• Participate in the documentation of application flows, upstream/downstream impacts during outages, the customer experience in failure scenarios, contacts for various support needs and ensures appropriate documents and wikis are up to date and available for use during triage
• Responsible for data quality and completion of incident tickets, including ensuring all impacts are accurately recorded and documented in the system of record.
• Work ad-hoc reports and offline incidents at the direction of the senior team members or leadership
• Promote and enforce production governance during triage/testing and fix efforts, exercises judgment within defined procedures and practices to determine appropriate action.
• Technical areas of focus are on Firewall and IDS/IPS, and extends to other network security areas such as (but not limited to) Application Delivery (Load Balancer), DDI, Proxy, AAA.
• Must adhere to design standards and global design authority processes and procedures.
• The ability to assemble professional documents based on existing templates and ability to provide accurate work descriptions with assumptions, and caveats.

About Bank of America

Our purpose as a firm is to make financial livesbetter, through the power of every connection. Across the world, we partnerwith leading corporate and institutional investors through our offices in morethan 35 countries. In the U.S. alone, we serve almost all of the Fortune 500companies and approximately 67 million consumer and small-business clients. Weprovide a full suite of financial products and services, from banking andinvestments to asset and risk management. We cover a broad range of asset classes,making us a global leader in corporate and investment banking, sales andtrading.

Connecting Asia Pacific to the world

Our Asia Pacific team is spread across 19 citiesin 12 markets. We are focused on connecting Asia to the world and the world toAsia, using our global expertise to ensure success is shared between us, ourclients and our communities. Our regional footprint covers 12 currencies, morethan a dozen languages and five time zones, placing us firmly among theregion’s leading financial services companies.