• Build the VPN Migration Playbook
• Playbook will be used to coordinate configuration migrations and translations within a repeatable, planned framework
• Manage up to 100 VPN migrations
• Design and build out new VPN partner connectivity in Arizona and Equinix facilities, as agreed with partners, as part of the migration project
• Support the establishment of up to 250 Direct Internet Access (DIA) partner connections through firewall policy updates
• Manage up to 20 partner connections, leveraging partner equipment deployed into the Equinix facility
• Establish connectivity and test with partners and well as business application teams
• Support for after-hours testing or troubleshooting with partners and business application teams
• Manage the Big 5 Trading application needs related to partner connectivity
• Troubleshoot, route, and switch as well as manage firewalls across these stacks

Skills: VPN Migration, Playbook Development, Firewall Management, DIA Connectivity, Partner Integration, Network Troubleshooting, Routing Switching, Application Support

• Design and execute firewall rule changes, following team standards to ensure a secure, optimized firewall policy structure is maintained
• Monitor and maintain the health of all firewalls
• Work with project teams to engineer firewall solutions to meet security requirements and business needs
• Maintain documentation of firewall procedures and standards
• Work with management to identify technologies and procedures to improve operations
• Provide support and input to team projects
• Develop Visio drawings of security infrastructure
• Build and troubleshoot Site-to-Site and Client VPN connections
• Build, edit policies and deploy firewalls
• Patch, upgrade firewalls and provide on-call support

Skills: Firewall Design, Rule Execution, Firewall Monitoring, Policy Documentation, Solution Engineering, Technology Evaluation, VPN Configuration, Firewall Troubleshooting

• Configure and utilize network protection components (such as firewalls, Virtual Private Networks [VPNs] and network Intrusion Detection Systems [IDSs])
• Apply knowledge of the common attack vectors on the network layer
• Perform data parsing and troubleshoot and restore servers and appliances to a fully operational state
• Apply knowledge of basic system administration, network, and operating system hardening techniques
• Discovery of existing Firewall config, rules, network, security policy, creation of migration plans and Firewall clean up
• Verify licenses required, recommended firmware, and identify bugs
• Migrate the IDS firewall to the colo
• Remove redundant firewall from HA (High Availability) pair and migrate to DR (Disaster Recovery)
• Configure migrated firewalls into an HA pair at HQ and DR
• Integrate RA VPN user authentication into ClearPass
• Review existing SSL decryption policy, and migrate to new HA firewalls as built diagrams, configuration templates, and final configs

Skills: Firewall Configuration, VPN Management, IDS Utilization, Attack Analysis, System Hardening, Migration Planning, HA Deployment, Policy Cleanup

• Serve as the Palo Alto SME for firewall projects, gathering requirements, planning, proposing, and implementing firewall solutions
• Work with the IAM team to build out a new Remote Access VPN network
• Run the MACD of firewall rules and configurations
• Implement security hardening of firewall/VPN configurations
• Review, schedule, deploy and monitor firewall and VPN patches and upgrades
• Monitor firewall/VPN operational and security alerts and dashboards
• Define, implement, and monitor processes and procedures for maintaining the firewall policy lifecycle
• Design and operate network infrastructure (Data, Security) locally and globally
• Troubleshoot complex network (LAN, WAN, DNS) and firewall-related issues
• Remove unused rules, objects, and groups, and reorder the policy

Skills: Palo Alto SME, VPN Deployment, Rule Management, Security Hardening, Patch Monitoring, Alert Analysis, Policy Lifecycle, Network Troubleshooting

• Proactively identify and eliminate network performance bottlenecks impacting business workloads
• Steadily improve network uptime
• Protect Keysight’s network from cyberattacks
• Secure the network from malicious internal attacks
• Provide technical leadership and expertise in escalations and incident response
• Lead or participate in Problem Management and root cause analysis
• Contribute to global projects, including new site build-outs, acquisition integrations, new technology deployments or technology refreshes
• Pilot Keysight’s commercial network management and visibility solution
• Stabilize newly deployed cutting-edge network solutions
• Perform troubleshooting for firewall issues

Skills: Network Optimization, Uptime Stability, Cyber Defense, Threat Protection, Incident Handling, Root Analysis, Project Support, Network Deployment

• Strong understanding of Firewalls (Check Point, Palo Alto, Cisco ASA)
• Good understanding of IP networking and Internet technologies, in either Cisco or Aruba switch and routing platforms
• Strong network analytical and troubleshooting skills with the capability to handle and own critical issues through to resolution
• Strong communication and stakeholder engagement skills
• Working knowledge of UNIX, Linux, Windows, SNMP, and Microsoft Active Directory
• Ability to remain calm under pressure and when faced with adversity or urgent issues
• Customer-focused with a “service first” mentality and best-in-class communication skills
• Able to view current processes and procedures as opportunities for enhancement, tuning and improvement
• Excellent Communication and Teamwork skills
• Advanced English language skills (verbal, reading, writing, understanding)
• Experience of working in a global environment 
• Process Discipline and Documentation skills

Qualifications: BS in Information Security with 6 years of Experience

• Strong Experience with BGP route reflector and all other routing protocols
• Good troubleshooting skills - ability to analyse network packet captures
• Ability to isolate the cause of an issue, working with various support teams to resolve day-to-day issues
• Strong experience with Security (IPSEC / SSL-VPN / NAT)
• Good presentation skills - shall be able to participate in the review meetings and be able to put across the points of concern
• Capability to conduct risk analysis, impact analysis, and dependencies on customer/internal teams
• Knowledge and experience of working with ITIL Processes
• Experience in the design, implementation and operation of networks, including firewalling
• Experience in solving complex issues, simplifying them and driving them to resolution
• Experience with an Enterprise Firewall Platform, Cisco or Palo Alto
• Experience with a Firewall Assessment Tool such as Firemon 
• Experience with Service Now and its change management system 

Qualifications: BS in Information Technology with 4 years of Experience

• Experience in Information Security or Network Security in an enterprise environment
• Understanding of the following Palo Alto and Cisco Firewalls, Routing and Switching
• Experience adding proper network segmentation and working on segmentation projects
• Experience with IPS, IDS and IDPS and proxy technology experience
• Experience in Financials, DoD, large Pharma or other high security and regulated environments
• Must have risk assessment and mitigation expertise in IT or IS
• Experience overseeing information security/technology projects from start to finish
• Working experience in managing information technology infrastructure
• Strong knowledge in the following technologies - Firewalls, Data Loss Prevention, VPN, Intrusion Detection/Prevention, Network Scanning and Compliance, Network Access control, and Advanced Persistent Threat Prevention
• Ability to demonstrate strong knowledge of computer security concepts
• Ability to communicate effectively with various clients, with the ability to explain and elaborate on technical details

Qualifications: BS in Computer Engineering with 5 years of Experience

• Experience with Palo Alto including Next-Gen Firewalls, Panorama, Global Protect, performing deployment, configuration, policy management and administration
• Experience with conducting security work in on-prem infrastructure or cloud environments including AWS, Azure
• Experience with Palo Alto Networks or VM-Series Technologies
• Deep knowledge of network fundamentals including router or switch administration, IP subnets, routing protocols, and network tools
• Experience with Linux administration
• Experience with Palo Alto Networks tools including Threat Prevention, Wildfire, URL Filtering, and Cortex Data Lake
• Experience with intrusion detection systems, remote access VPN technologies, vulnerability assessment tools, event, and log analysis solutions or configuration and change management systems
• Must have Palo Alto Certifications including PCNSA, PCNSE, PCCSE
• Demonstrated ability to document processes and procedures
• Excellent written and verbal communication skills
• Understanding of DOD information assurance policy and regulations

Qualifications: BS in Systems Engineering with 3 years of Experience

• Experience in Security or Network support
• Strong practical knowledge of Security platforms and technology
• Proven crisis management skills
• Strong analytical, problem-solving and organizational skills
• Strong written and verbal communication skills
• Able to build relationships with multi-disciplinary factory stakeholders
• Have a working knowledge and understanding of OT and IT cybersecurity technologies
• Able to design and implement firewall rules
• Familiarity with hands-on configuration of firewall rules for any brand of firewall
• Understand IP networking and be able to produce basic network topology diagrams
• Intermediate MS Excel skills to automate firewall rule production tasks, such as vlookup, copy and concatenate, etc.

Qualifications: BS in IT Infrastructure with 6 years of Experience