Network Security SME

Network Security SME

Krakow or Warsaw, Poland(5 days onsite)

Cisco Firewall, Cisco ISE, and Palo Alto -Lead Operations Support Engineer - L2/L3

Experience: 8-10 Years

Job Summary: We are seeking a highly skilled Lead Operations Support Engineer to manage and support Cisco Firewall, Cisco Identity Services Engine (ISE), and Palo Alto L2/L3 environments. The ideal candidate will have 8-10 years of experience in providing operational support, troubleshooting, and maintenance of security infrastructure, with a strong focus on Cisco and Palo Alto technologies.

Key Responsibilities:

Leadership: Lead and mentor a team of operations support engineers, providing guidance and expertise in managing Cisco Firewall, Cisco ISE, and Palo Alto environments.

Operational Support: Provide day-to-day operational support for Cisco Firewall, Cisco ISE, and Palo Alto L2/L3 environments, ensuring high availability and performance.

Troubleshooting: Diagnose and resolve issues related to Cisco Firewall, Cisco ISE, and Palo Alto applications, including performance bottlenecks, connectivity problems, and configuration errors.

System Maintenance: Perform regular maintenance tasks, including patching, upgrades, and backups, to ensure the stability and security of the environments.

Deployment: Manage the deployment of security policies and updates, ensuring minimal disruption to services.

Monitoring: Monitor system performance and health, using tools to identify and address potential issues proactively.

Documentation: Maintain detailed documentation of system configurations, operational procedures, and troubleshooting steps.

Collaboration: Work closely with network, security, and IT teams to support security lifecycle management and ensure seamless integration.

Compliance: Ensure that the environments comply with organizational policies and industry standards.

Incident Management: Lead incident management efforts, including root cause analysis and implementing corrective actions to prevent recurrence.

Capacity Planning: Conduct capacity planning to ensure the environments can handle current and future workloads efficiently.

Disaster Recovery: Develop and maintain disaster recovery plans, ensuring business continuity in case of system failures.

Performance Tuning: Perform performance tuning and optimization of applications and infrastructure to enhance system efficiency.

Security Management: Implement and manage security measures to protect the environments from vulnerabilities and threats.

Training and Mentoring: Provide training and mentoring to junior team members, fostering a culture of continuous learning and improvement.

Qualifications:

Technical Skills:

Cisco Firewall:

Strong knowledge of Cisco Firewall technologies, including ASA, Firepower, and Secure Firewall.

Proficiency in configuring and managing Cisco Firewalls, including access control policies, VPNs, and threat detection.

Experience with high availability and clustering configurations.

Knowledge of intrusion prevention systems (IPS) and intrusion detection systems (IDS).

Familiarity with firewall rule optimization and management.

Cisco ISE:

Strong knowledge of Cisco ISE architecture and components.

Experience with ISE installation, configuration, and administration.

Proficiency in developing and managing ISE policies, including authentication, authorization, and accounting (AAA).

Familiarity with integrating ISE with other security systems (e.g., Cisco Secure Network Analytics, Duo).

Understanding of ISE performance tuning and optimization techniques.

Experience with ISE monitoring and troubleshooting tools (e.g., ISE Profiler, ISE Posture).

Palo Alto L2/L3:

Strong knowledge of Palo Alto Networks firewall technologies.

Experience with configuring and managing Palo Alto L2/L3 interfaces.

Familiarity with network protocols (e.g., TCP/IP, DNS, DHCP) and security protocols (e.g., IPsec, SSL/TLS).

Knowledge of network segmentation, micro segmentation, and zero-trust security models.

Experience with scripting and automation tools (e.g., Python, Ansible) for operational tasks.

Familiarity with monitoring and performance tuning tools (e.g., Panorama, SolarWinds).

Problem-Solving: Excellent troubleshooting skills with the ability to diagnose and resolve complex technical issues.

Communication: Strong verbal and written communication skills, with the ability to explain technical concepts to non-technical users.

Certifications: Relevant certifications in Cisco Firewall, Cisco ISE, and Palo Alto technologies (e.g., CCNP Security, CCIE Security, PCNSE) are a plus.

Team Player: Ability to work collaboratively with IT teams, vendors, and end-users.