Senior Security Engineer/Architect

This is a fully remote position, open to applicants in Florida.

📋 Description

• Ensure all network-based security controls operate effectively across Carrier.

• Contribute to a network/system operations team for the deployment, maintenance, and operation of Carrier’s security tool stack.

• Establish operational rigor through policies, runbooks, change control, and ensure 24 x 7 x 365 tool-stack availability and service delivery.

• Cultivate and sustain relationships with Security, IT, Data Protection, Identity and Access Management, Cyber, Architecture, Engineering, audit, and external partners.

• Choose, implement, and support network security platforms and tools.

• Develop an internal service catalogue that documents control attributes, user experience, SLAs, and downstream impacts.

• Document, review, fulfill, and automate audit controls in collaboration with internal and external audit teams.

• Assist network security initiatives by leveraging network-centric and solution-specific expertise.

• Create a multifunctional knowledge-management program to train new employees on Carrier environments and tools.

• Formulate auditable processes and artifacts to ensure continuity of network security operations.

• Provide 24 x 7 x 365 global operational capability and guarantee the availability and proper functioning of security tools.

• Deploy, configure, patch, operate, and retire security hardware and software.

• Design, engineer, and monitor security measures to protect network systems.

• Focus on firewalls, IDS/IPS, DNS security, outbound web proxy, email security, packet capture, flow analysis, RADIUS, 802.1x, and NAC.

• Strengthen and secure systems and networks.

⛳️ Requirements

• High School Diploma / GED.

• Over 5 years of technical experience in network operations, including the deployment, configuration, maintenance, and operation of switches, routers, gateways, DNS servers, VPN concentrators, etc.

• More than 5 years of technical experience with firewalls, IDS, IPS, web proxies, email security systems, packet capture, flow analyzers, firewall rule analyzers, etc.

• At least 5 years of experience with Palo Alto, Fortinet, and/or Next Generation Firewalls.

• Minimum of 2 years of experience with Zscaler Security Products, including Zscaler Internet Access and Zscaler Private Access.

• Must be available for a 24 x 7 x 365 global network security operations capability, including on-call coverage for emergency issues.

• Excellent written and verbal communication skills.

• Willingness to engage in hiring and training staff, developing policies and procedures, maturing processes and change-control, creating key artifacts, and interacting with auditors with minimal supervision.

• Proven experience in identifying technologies and processes that enhance the overall security ecosystem.

• Familiarity with using industry-standard analysis criteria to evaluate the security level of a system or network.

• Experience with Meraki MX security appliances.

• Background in the design and engineering of security controls.

• Knowledge of data center hardware installation and maintenance.

• Current CISSP or other recognized information security certification is preferred.

• Immigration sponsorship is not available for this position.

🏝️ Benefits

• Short-term cash incentives, contingent on plan requirements.

• Medical, Dental, Vision coverage.

• Wellness incentives.

• Retirement benefits.

• Paid vacation days, up to 15 days.

• Paid sick days, up to 5 days.

• Paid personal leave, up to 5 days.

• Paid holidays, up to 13 days.

• Birth and adoption leave.

• Parental leave.

• Family and medical leave.

• Bereavement leave.

• Jury duty leave.

• Military leave.

• Option to purchase additional vacation.

• Short-term and long-term disability insurance.

• Life Insurance and Accidental Death and Dismemberment coverage.

• Health Savings Account.

• Health Care Spending Account.

• Dependent Care Spending Account.

• Tuition assistance.

• Remote work arrangement.

• Preference for candidates in the Eastern Time Zone to facilitate collaboration with geographically dispersed teams.