Job Information
Raymond James Financial, Inc. Senior Network Security Engineer (Arista) in Saint Petersburg, Florida
Job Description
This position follows our hybrid-friendly schedule, so you get the best of both worlds – flexibility and collaboration. In office days will be 2-3 per week averaging 10-12 days per month in one of the following Corporate Office locations: St. Petersburg, FL; Southfield, MI; Denver, CO.
Job Summary:
The Senior Network Engineer is responsible for managing, designing and improving RJ’s enterprise network. He or she will assist network architects with design and implementation of network technologies. This role will primarily focus on routing and switching, we are targeting engineers with strong Cisco and Arista experience. This role is responsible for senior level network engineering implementation and providing technical principles guidance to peer engineers, proactively taking technology project delivery from 0 to 100% with little to no supervision. General duties include leading buildout of solutions and driving innovation for implementation of new modern technologies in the enterprise network. Partners with management and peer engineers to drive infrastructure modernization projects to completion and provides Tier3 technical support using extensive expertise to take on work assignments the team is engaged in. Strong people skills and the ability to balance/prioritize between multiple tasks and projects are essential. This position does involve both routing and switching as well as network firewall implementation projects for both on-prem and cloud infrastructure.
Responsibilities:
Primary focus is to implement new technologies or changes to existing technologies as identified and designed by the architecture team.
Researches and recommends innovative technologies and approaches for enterprise infrastructure management, upgrades, or improvements.
Utilize and integrate network components such as switches, routers, firewalls, wireless AP/Controllers, SDN fabric components, load balancers, NAC servers and cloud infrastructure network elements.
Proactively identify and implement network improvements to assure the performance, resiliency and redundancy of the network.
Utilizes blueprints to engineer solutions and adhere to enterprise standards (engineering focused, architecture supported).
Take disaster recovery and business continuity plan aspects into consideration for any new technology implementation or change.
Provides ad-hoc support for incidents requiring T3 level resources (engineering/architecture) and knowledge.
Use Microsoft Visio to produce and maintain documentation with regards to implementation of new systems or system changesParticipate in 24x7 on call rotation for SME T3 support requirements as needed.
Maintains service level agreements of departmental metrics, key performance indicators and adhering to strict project timelines.
Maintain/Improve security posture, promptly addressing issues, vulnerabilities and security requirements according to regulatory guidelines (PCIDSS, PII, CIS, NIST)
Implement required security measures, such as firewalls or message encryption, and provide input on their design, monitoring performance to notify security experts of any problems.
Contribute to the drafting of policies, procedures, and related guidelines within an area of expertise to meet defined key principles and ensure compliance with external requirements.
Provide fault isolation and resolution to limit and address issues promptly.
Identify, within the team, instances of noncompliance with the organization's policies and procedures and/or relevant regulatory codes and codes of conduct, reporting these instances and escalating issues as appropriate.
Develop own capabilities by participating in assessment and development planning activities as well as formal and informal training and coaching; gain or maintain external professional accreditation, where relevant, to improve performance and fulfill personal potential. Maintain an understanding of relevant technology, external regulation, and industry best practices through ongoing education, attending conferences, and reading specialist media.
Skills:
Strong experience in network design, implementation and documentation of medium-large scale enterprise networks (10,000+ users)
Strong experience using cisco enterprise technologies - CCNP Enterprise (R&S) knowledge level required
1-2 years of experience in designing, implementing and maintaining data center spine leaf fabrics (Arista/Cisco). Arista ACE L3 certification required.
1-2 years of experience with Cisco DNA Center
1-2 years of Experience with SDWAN technologies (Cisco, Palo Alto ION)
Experience with Cisco Wireless technologies in a large enterprise environment (Cisco WLC, FlexConnect, CAPWAP)Desirable:
Experience with designing, implementing and maintaining Palo Alto Centrally managed firewall platforms (NGFW Pan OS, Threat Prevention, UserID, Global Protect, HA setup, Prisma Access)
Administering F5 Clusters, Load balancing, SSL decryption policies, DNS Geolocation (LTM, GTM, APM, ASM/Cloud WAF).
Remote Access VPN solutions (Global Protect, F5 BIG-IP Edge)
Certificate management (Venafi), Cryptographic protocols and algorithms, certificate PKI.
Implementing NAC solutions (Forescout/Cisco ISE)
Experience with Infoblox DNS/IPAM functions.
Familiarity with cloud computing principles and experience in designing secure and scalable network solutions for cloud environments.
Automation/scripting experience (Python, Ansible)
Network security protocols, architecture and design principles; intrusion detection, prevention systems, secure socket layer (SSL) protocols, virtual private networks (VPNs),
Network performance optimization, capacity planning and load balancing.
Familiarity with the following monitoring platforms: Microsoft SevOne, SolarWinds, DataDog, Splunk)
Works without supervision and provides technical guidance when required on analyzing data trends for use in reports to help guide decision making.
Works without supervision and provides technical guidance when required on developing appropriate plans or performing necessary actions based on recommendations and requirements.
Works with full competence to conduct activities to collect, analyze, diagram (model), and report information and data flow, including state changes, to help make strategic decisions, achieve major goals, and solve complex problems. Typically works without supervision and may provide technical guidance.
Works with full competence to utilize the appropriate modeling tool(s) to diagram the requirements from data and state changes, process and process improvements, as well as use cases and user stories. Typically works without supervision and may provide technical guidance.
Works without supervision and provides technical guidance when required on monitoring, diagnosing and fixing technological problems.
Works without supervision and provides technical guidance when required on maintaining the security, integrity, compliance and continuity of IT systems and services.
Works with full competence to conduct gap analysis between current and future states to identify components of the overall change strategy. Typically works without supervision and may provide technical guidance.
Licenses/Certifications:
Required: CCNP Enterprise (R&S), Arista ACE L3. Desirable: CCIE, PCNSE,JNCIP.
Security and control certifications preferred (CISSP, CISM, CISA, CRISC).
Education
Bachelor’s: Computer and Information Science, Bachelor’s: Information Technology
Work Experience
Manager Experience - 7 to 12 months
Certifications
SANS Offensive Security Certification - SANS Institute
Travel
Less than 25%
Workstyle
Hybrid
At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view.
We expect our associates at all levels to:
• Grow professionally and inspire others to do the same
• Work with and through others to achieve desired outcomes
• Make prompt, pragmatic choices and act with the client in mind
• Take ownership and hold themselves and others accountable for delivering results that matter
• Contribute to the continuous evolution of the firm
At Raymond James – as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.
#LI-EB1