Senior Security Engineer jobs

Job Search

Go to Advanced Search »

Senior Security Engineer

Company: TEKsystems
Location: Denver, Colorado
Category: Information Technology Jobs
Rate: Based on experience.
Job Type: Contract-to-Hire
Posting ID: 1597801
Posting Date: 5/1/2008 Allegis Group Family of Hiring Companies

Apply Online for this Job Today

Already a Member?

Not a Member?

Senior Security Engineer Job Description:

TEKsystems has an immediate contract to hire need for a Senior Security Engineer that can interview and start immediately. Primary job responsibilities are listed below:

Job Summary:
Provides Tier 3 support for enterprise data firewall devices and services. Performs advanced security engineering and leadership in the design of enterprise devices and services. Develops network security engineering guidelines for new network and security architectures and for evaluating current infrastructures. Performs security risk assessments as an internal auditor for security issues. Requires a bachelor’s degree in a related area and/or CCSP/CCSE level certifications and 3-5 years of experience in the field or in a related area.

Network Security Engineering and Design:
- Provide advanced security engineering and design in support of enterprise devices and services
- Design advanced solutions to protect the confidentiality and integrity of information, and maintain the technical mechanisms of legitimate access to it
- Provide advanced technical leadership in all facets of security for the enterprise network.
- Provide intermediate network security engineering guidance for developing new network and security architectures and evaluating current infrastructures.
- Provide advanced technical leadership and resources for enterprise network security devices and services
- Perform information security risk assessments and serves as an internal auditor for security issues
- Provide advanced network security engineering guidance for developing new network and security architectures and evaluating current infrastructures
- Provide Tier 3 support for enterprise Security devices and services
- Builds, develops and maintains relationships with internal and external customers and vendors to formulate solutions to CLIENT and customer system issues related to information security

Project Planning and Implementation:
- Provide advanced leadership for and participates in complex long-term project work, including functional subsystem upgrades for mission-critical security devices and services in support of business objectives and growth
- Provide advanced technical direction and leadership to the lower level security administrators/engineers through the planning and implementation processes.
- Lead requirements derivation and analysis, security specifications, network security services design, functional partitioning, and security architecture definition.
- Provide advanced expertise in the development of security related test, validation, and integration plans on projects, and ensure maintenance of security integrity throughout project development
- Provides leadership and coordinates the activities of the Information Security Committee.
- Documents security policies and procedures created by the Information Security Committee/Council.
- Advises the organization with current information about information security technologies and related regulatory issues
- Provide best practices in relation to the overall security of CLIENT'S network infrastructure

Network Security Operations:
- Day-to-day operational responsibility for Clients Data security.
- Responsible for design and implementation of security services and performs security testing and evaluation testing on a regular basis.
- Monitors availability of security devices and services, and establishes escalation and resolution policies and procedures to reduce the MTTR (Mean Time to Repair) of business critical security components.
- Conducts advanced enterprise-level performance tuning, resource planning, and ensures availability of mission-critical security devices and services.
- Ensures availability of 24x7 on-call support for emergencies.
- Provides direct training and oversight to all employees, contractors, alliances, or other third parties, ensuring proper information security clearance in accordance with established organizational information security policies and procedures.
- Monitors the internal control systems to ensure that appropriate access levels are maintained
- Manages professionals in the maintenance of networks and systems to protect data from unauthorized users. Identifies, reports, and resolves security violations.
- Monitors compliance with information security policies and procedures, referring problems to the appropriate department manager
- Works with internal and external customers and agencies to implement and maintain secure VPN in support of business initiatives as well as compliance for applicable regulations

Network Security Administration:
- Direct and perform routine and non-routine tasks for daily operations of enterprise security devices and services
- Direct and perform collection analysis and reporting of operational data for use in maintenance, performance tuning and capacity planning for future enhancements/upgrades
- Serve as an escalation point for Tier 3 support for enterprise security devices and services

Education
- Required: Bachelors’ degree in Computer Science, technical discipline, or relative work experience
- Preferred: BSEE, BSCS, and any security related certifications such as CCSP, CCSE, JNCIS-FWV or CISSP/ISSEP equivalent experience and skill

Industry Experience
- Required: Network engineering and design in a large 24x7 operations telecommunications environment
- Preferred: Prior experience with a wireless carrier or carrier grade provider and its security infrastructure, to include EVDO and VoIP

Job Experience

Required
- Advanced knowledge with 3+ years experience in a high-performance datacenter with direct support and security systems engineering responsibilities with a minimum of 4 year of secure system design.
- 24x7 operations experience required.
- Advanced knowledge of high-availability technologies.
- Intermediate and proven experience achieving and maintaining 99.999% availability of security services and devices.
- Advanced knowledge of networking fundamentals including common protocols, hardware components and architecture design.
- Intermediate knowledge of information security principles including authentication, confidentiality, integrity, availability and non-repudiation.
- Advanced knowledge in design, implementation and maintenance in security devices such as firewalls, secure VPN, IDS and IPS
- Intermediate knowledge in one or more areas of information security technology including cryptography, key management, authentication mechanisms, multilevel networks, malicious code detection, intrusion detection, firewalls, protection policies and security assessment.
- Advanced written/oral communication skills and the ability to lead others in a technical team environment.
- Proven experience in developing quality systems documentation and presentations.
- Advanced experience and/or expertise with the following standards: TCP/IP, LDAP, IEEE 802.3, IEEE 802.11, IEEE 802.15, IEEE 802.16, X.509, PKIX, PKCS, IPSEC, TLS, PGP and FIPS 140-2.
- Advanced knowledge with 1+ years experience with most of the following security products:
- Juniper Netscreens, SSG, SA, IDP and ISG series devices
- Cisco – APS, ASA, IDS, PIX or FWSM
Appliedwatch IDS
- Checkpoint
- Monitoring design, network analysis and metric reporting to establish bandwidth usage forecasting and network availability
- Advanced experience in documenting on a wiki and in Visio all network topology changes
- Customer Facing with excellent social skills
- Excellent written and communication skills
- Patience to adhere to best practices including maintenance windows and change control procedures
- Ability to work on-call hours to respond quickly to issues and outages providing advanced expertise to ensure the quickest MTTR possible.
- Proven experience in mentoring peers and junior level engineers and administrators

Preferred
- Advanced knowledge with 5+ years experience in a high-performance datacenter with direct support and security systems engineering responsibilities with a minimum of 6 year of secure system design.
- Advanced knowledge with 5+ years experience of the following security products:
- Juniper Netscreens, SSG, SA, IDP and ISG series devices
- Cisco – APS, ASA, IDS, PIX or FWSM
- Appliedwatch IDS
- Checkpoint

- Advanced experience and/or expertise with the following standards: TCP/IP, LDAP, IEEE 802.3, IEEE 802.11, IEEE 802.15, IEEE 802.16, X.509, PKIX, PKCS, IPSEC, TLS, PGP and FIPS 140-2.

Required Skills for Senior Security Engineer Job:

  • CISCO
  • JUNIPER
  • CISCO PIX

About TEKsystems:

Join TEKsystems® and get your career on the fast track. As the leading technology staffing and services firm, we are passionate about deploying high-caliber IT and communications expertise. To satisfy our constant need for expertise, we actively seek talented Technical Professionals with all levels of information technology and communications skills. TEKsystems knows that every professional has different needs, so we'll work together to determine a suitable benefits package. We offer options to our Technical Professionals that could include: a health plan, 401k, provisions for vacation and holiday pay, and technical and professional training. With a foundation as the nation's largest IT staffing firm, we've become a billion-dollar services company by blending superior client service with an unrivaled ability to source and manage talent to precise specifications, resulting in successful technology executions. Allegis Group and its subsidiaries are equal opportunity employers. M/F/D/V

Contact Information

Justin R Watson Apply Now! Begin by filling out the "Apply Online for this Job" section at the top of the page Need Directions? Get office driving directions with Google Maps
jwatson@teksystems.com
TEKsystems - Denver, CO
6300 S. Syracuse Way
Suite 200

Englewood, CO  80111
TEL: (303) 843-3716
FAX: (303) 694-7190