Network Engineer

Description

The company works across aerospace, transportation, defence, security and space, and its customers depend on its work in fast-changing markets.

This hybrid role in Irvine, CA, USA is for a Network Principal who oversees all network infrastructure operations.

You may be a subject matter expert in some areas, but you need full professional knowledge of network infrastructure and company goals so you can solve a wide range of problems, sometimes in creative ways, across every area listed here.

You work as an advanced engineer with little hands-on direction and only general guidance on new assignments.

Responsibilities

• Work tickets in ServiceNow, read architecture diagrams and write rules from those diagrams.
• Manage firewalls and network filters across enterprise, store and cloud networks, including intrusion prevention policies.
• Apply your knowledge of OSPF and BGP routing, VLANs, subnetting, load balancing, TCP/IP, DNS, HTTP, TLS and SSH.
• Set up and support site-to-site and remote-access VPNs.
• Run network access control.
• Configure authentication, authorization and accounting, including multi-factor authentication, along with web access proxy servers and URL filtering.
• Create network security policies, and document and approve exceptions.
• Suggest a professional development and training plan to your team lead or manager.
• Carry out assigned projects that build partnerships between the network security team and other business areas.
• With senior engineers, define network security requirements for current and future end-to-end architectures and platforms.
• Help senior engineers work with development and engineering teams to rank security risks, recommend mitigation or remediation, and put compensating controls in place.
• Help run proof-of-concept tests on network security solutions being considered for purchase and rollout.
• Help write and maintain network security policies, standards, processes and workflows.
• Take part in the team on-call rotation, providing 7/24 support for infrastructure service incidents and escalating through management when needed.

Requirements

• Bachelor's degree in a related field with 5-8+ years of relevant work experience, or a Master's degree in a related field with 4+ years, or an equivalent mix of education and experience.
• You need 3+ years of working with Palo Alto firewalls.
• Hold at least one entry-level vendor certification in network security, or equivalent experience. Non-entry-level certifications are preferred. Examples include Palo Alto PCNSA or PCNSE (preferred), Cisco CCNA or CCNP Security, and Juniper JNCIA-SEC or JNCIS-SEC.
• Strong interpersonal and leadership skills.
• Strong written and oral communication, people, planning, implementation and troubleshooting skills.
• Extensive experience with Cisco switches, Cisco Secure Client VPN, Fortinet firewalls and Cisco ISE.
• ITIL experience and certifications.
• You may do light physical work in server rooms and while supporting on-site network work.
• Lift and carry items up to 50 lbs.

Conditions

Core hours are Monday to Friday, 9:30am to 3:00pm. Your exact schedule and expected hours will be agreed with you.

Weekend and evening work may be needed, depending on projects and customer requirements.

Access to the Ottawa server room is part of the role. It is a secure zone and requires NATO Secret clearance.

The anticipated total target compensation, including annual salary and bonus eligibility, is $110k-150k USD per year. The company may pay more or less than this range and may offer other benefits or compensation, based on factors unrelated to protected status under local, provincial and federal law.

The reference total target cash market range, covering base salary and variable target, is $95,880.75 to $170,961.00 USD per year, based on pay for similar jobs in the same industry and region. Where someone lands in that range depends on career history, skills, performance, budget, customer program needs and internal equity.

The company is an equal opportunity employer, including for disability and veterans.

AI tools may help screen and assess applications and suggest matches, but human recruiters make every hiring decision.

Benefits

• Full-time employees working 30 or more hours a week, and their eligible dependents, can choose from health, dental, vision, FSA or HSA, voluntary life and AD&D, whole group life with LTC, critical illness, hospital indemnity, accident, legal, identity theft and pet insurance.
• Retirement savings plan available after 30 days, with company contributions and matching, and no vesting period.
• Paid company holidays and paid time off.
• Company-provided life insurance, AD&D, disability, employee assistance plan and well-being program.