Job Information
Lumen Palo Alto Network Security Engineer in Topeka, Kansas
About Lumen
Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress. We’re invested in providing the flexibility you need to thrive and deliver lasting impact. Apply now to continue digitally connecting the world and shaping the future.
The Role
The Lead Information Security Engineer will be responsible for implementation and administration of network security hardware and software, enforcing network security policies and compliance requirements. This role requires proficiency with Fortinet, Palo Alto firewalls and related products.. The role is expected to contribute to documentation and adhere to SLA targets and requirements. The daily duties include hands-on troubleshooting, maintaining and patching managed security platform and interfacing with clients and associates as needed to resolve complex cases.
The Main Responsibilities
• Architects, designs, implements, maintains and operates information system security controls and countermeasures;
• Analyzes and recommends security controls and procedures in business processes, development, and change management lifecycle of information systems, and provides oversight to ensure compliance
• Develops monitoring and visibility capabilities on information systems to identify security incidents and vulnerabilities; reports on incidents, vulnerabilities, and trends to customers or executive management
• Architects, designs, implements, maintains and operates authentication systems and access controls, including provisioning and changes to existing controls
• Analyzes and develops information security governance controls including organizational policies, procedures, standards, baselines and guidelines with respect to information security and use and operation of information system
• Provides guidance to organization management and customers as well as develops and executes plans for compliance and mitigation of risks.
Provide direct technical support including:
• Advanced troubleshooting on the full range of Fortinet and Palo Alto products
• Collection, analysis and change recommendations of configuration information
• Collection and analysis of customer network information
• Collection and analysis of packet trace information
• Recommend corrective actions based on analysis
• Provide customer education where needed due to gaps in networking, product knowledge
• Consultation of technical documentation, bulletins and release notes for known problems
• Reproduction of customer environments on lab equipment
• Follow up on technical cases including proper escalation and management of the case
• Manage customer communications and expectations until the closure of each case
Specific installation tasks could include:
• Physically or works with partners to install and connect firewalls and other security appliances
• Install latest vendor-approved stable OS on appliances
• Create virtual firewalls with appropriate configurations and policies
• Configure remote access VPN functionality
• Configure site-to-site VPN functionality
• Configure firewall interfaces, network configurations, access control lists and policies, routing, remote access (VPN) and next-generation firewall feature sets implementing best practices
• Integrate firewall with FortiManager, FortiAnalyzer, FortiAuthenticator and other Fortinet products as required
• Integrate firewall with Palo Alto Panorama/ Prisma, Global Protect and other Palo Alto products as required
• Configure high availability
• Configure SIEM Integration
What We Look For in a Candidate
Bachelor’s degree in Computer Science, Software Engineering or related field, or an equivalent combination of training and experience is desirable
• Advanced experience on Fortigate products
• Advanced experience on Palo Alto products
• Advanced experience with deploying Palo Alto products in Azure
• Advanced experience with networking concepts
• Experience in a technical support role in a networking/security company or equivalent education
• Advanced experience in networking (TCP/IP) protocols, computer/network security, firewalls, software defined networking and system administration.
• Experience with security products firewalls, IPSec, IDS/IPS, Anti-Spam, virus scanning
• Strong troubleshooting and problem-solving skills
• Extensive working knowledge of Windows, UNIX or Linux
• Strong English skills both written and verbal
• Possesses and applies expertise on multiple complex work assignments
• Hands-on technical IT, managed security operations and system administration experience.
• Knowledge of information security principles and practices.
• Demonstrated ability to learn and administer new systems and tools.
• Assignments may be broad in nature, requiring originality and innovation in determining how to accomplish tasks.
• Contributes to deliverables and performance metrics where applicable.
• Advanced experience in Linux shell scripting, Windows Powershell, Python, or Perl.
• Advanced experience in security system architecture and design techniques.
Preferred Qualifications:
• Fortinet NSE5 and higher certifications strongly desired
• Palo Alto PCNSE and higher certifications strongly desired
• Broader security certifications a plus
• 7+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of Technology Operations experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of experience in supporting managed security operations , including problem identification, ticket documentation, and customer/vendor relations, demonstrated through work, military, or education
• 5+ years of experience with Cloud platforms, Software defined networking architecture and deployment services
• Must have advanced hands on working knowledge of Linux, Microsoft NT/200X, firewall multi-layer design and implementation, router access list/packet filtering (Cisco), WANs, LANs, the Internet, Intranets, network protocols and network services (e.g., SSH, SFTP) ,intrusion detection systems, Software defined networks, Virtual Private Network (VPN), RSA SecureID, Enterprise Security management tools, security assessment software
Compensation
The starting salary for this role differs based on the employee's primary work location. Employees typically do not start at the top of the range, though compensation depends on each individual's qualifications.
Location Based Pay Ranges
$94420 - $125890 in these states: AR, ID, KY, LA, ME, MS, NE, SC, and SD.
$99390 - $132510 in these states: AZ, AL, FL, GA, IN, IA, KS, MO, MT, NM, ND, OH, OK, PA, TN, UT, VT, WV, WI, and WY.
$104360 - $139140 in these states: CO, HI, MI, MN, NV, NH, NC, OR, and RI.
$109330 - $145770 in these states: AK, CA, CT, DE, DC, IL, MD, MA, NJ, NY, TX, VA, and WA.
As with the pay range variety that's based on the region of a country, specific offers are determined by various factors such as experience, education, skills, certifications and other business needs.
What to Expect Next
Requisition #: 333497
Background Screening
If you are selected for a position, there will be a background screen, which may include checks for criminal records and/or motor vehicle reports and/or drug screening, depending on the position requirements. For more information on these checks, please refer to the Post Offer section of our FAQ page (https://jobs.lumen.com/i/global/en/faqs) . Job-related concerns identified during the background screening may disqualify you from the new position or your current role. Background results will be evaluated on a case-by-case basis.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Equal Employment Opportunities
We are committed to providing equal employment opportunities to all persons regardless of race, color, ancestry, citizenship, national origin, religion, veteran status, disability, genetic characteristic or information, age, gender, sexual orientation, gender identity, gender expression, marital status, family status, pregnancy, or other legally protected status (collectively, “protected statuses”). We do not tolerate unlawful discrimination in any employment decisions, including recruiting, hiring, compensation, promotion, benefits, discipline, termination, job assignments or training.
Disclaimer
The job responsibilities described above indicate the general nature and level of work performed by employees within this classification. It is not intended to include a comprehensive inventory of all duties and responsibilities for this job. Job duties and responsibilities are subject to change based on evolving business needs and conditions.
Salary Range
Salary Min :
94420
Salary Max :
145770
This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors.
This position is eligible for either short-term incentives or sales compensation. Director and VP positions also are eligible for long-term incentive. To learn more about our bonus structure, you can view additional information here. (https://jobs.lumen.com/global/en/compensation-information) We're able to answer any additional questions you may have as you move through the selection process.
As part of our comprehensive benefits package, Lumen offers a broad range of Health, Life, Voluntary Lifestyle and other benefits and perks that enhance your physical, mental, emotional and financial wellbeing. You can learn more by clicking here. (https://centurylinkbenefits.com)
Note: For union-represented postings, wage rates and ranges are governed by applicable collective bargaining agreement provisions.
Application Deadline
05/26/2024