Network Security Engineer, Global Network Services
Job Description
JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $2.6 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small business, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world's most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com.
Global Network Services (GNS) supports one of the world's largest enterprise networks - voice & data - spanning over 50 countries with over 1 million data network ports, 25,000+ network devices, 600+ PBX systems, 800+ voice mail systems, and 65+ call center sites with over 26,000 seats. Innovation is also a key priority with an expanding portfolio of over 75,000+ VoIP end-points, 50+ high definition video conferencing systems, and the ongoing expansion of service-provider-class ultra long haul networks, global WAN networks and regional MPLS networks.
The NS&S Infrastructure Engineering team within Global Network Services (GNS) is responsible for building and delivering Network Security and Services infrastructure, life cycle management, and tier 4 support to meet business demand for Global Data Networks. This position focuses on working with a team of senior engineers to engineer and implement Network Security and Services for use within the global enterprise network. The team is responsible for all Network Security and Services including firewalls, load balancers, proxies, remote access, Streaming Media, WAN Acceleration, Wireless and PSaaS.
A solid understanding of available network operating systems, network devices, and networking protocols is essential. The individual must be experienced in large enterprise or service provider network architecture, analysis, and engineering implementation.
A solid understanding of available network operating systems, network devices, and networking protocols is essential. The individual must be experienced in large enterprise or service provider network architecture, analysis, and engineering implementation.
The NS&S Infrastructure Engineering team within Global Network Services (GNS) is responsible for building and delivering Network Security and Services infrastructure, life cycle management, and tier 4 support to meet business demand for Global Data Networks.
The Network Security Engineer (NSE) will be a subject matter expert and technology leader for firewalls, DDOS mitigation techniques and network security. The Network Security engineer will be responsible for all aspects of firewall policy management, access rule aging analysis, automation of firewall rule deletes, rule usage reporting and auto aging rule deletions. Network Security Engineer will analyze firewall and Splunk logs to perform rule usage analysis and identify unused rules. NSE will be also involved in reporting and performing manual reconciliation and research on suspicious and unknown rules. NSE will analyze and support third party reputational blocking services. NSE will create standards, configuration templates, and support documentations important to the success of this role. NSE will support firewalls refresh and upgrade activities along with patch management. The Network Security Engineer will be considered a subject matter expert in their field and is expected to stay current with various technologies, organizational goals and industry trends to drive value.
Key Responsibilities:
- Firewall Policy management and analysis
- Creation of implementation standards and configuration templates
- Management of Firewall policy managers
- Life cycle support and maintenance
- Cross training support organizations GNOC and Tier 3
- Keep abreast of the Network Security Services market and vendor offerings
Qualifications
- 5+ years of experience in information technology with an emphasis on Network Services and Security
- Demonstrated experience with Network Services and Network-related disciplines in architecture and engineering required
- Strong knowledge of high level architecture and technical in-depth knowledge of one or more of the Network Services products: CheckPoint and Cisco Firewalls, third party reputational blocking service, Splunk, Network Security, and DDOS mitigation techniques.
- Experience with a mixed vendor environment – CheckPoint, Cisco, Skybox and Splunk
- Proven experience with the configuration and testing of related hardware and software
- Excellent client interfacing skills, strong verbal and written communication skills and ability to work with all levels of management.
- Experience working with colleagues across different time zones with a flexible approach to working hours (ability to work varied hours)
- Knowledge and demonstrated experience preferred in the following areas:
- Ability to troubleshoot network related issues using TCPDump or Capture or other tools
- Must have in depth knowledge of CheckPoint and Cisco firewalls, Skybox, Splunk, Arbor and other DDOS mitigation technologies
- Must have in-depth knowledge of CheckPoint Provider-1, MDS and MLM
- Must have shell scripting and/or programming knowledge in Perl, EXPECT or other programming languages
- IP Routing, Ethernet Switching, VPN's, Network Security services such as DNS, Web Proxy, Socks, Multicast, geographic and/or local server load balancing, Unix OS, Windows 2K/2K03.
- Must be able to troubleshoot all firewall issues.
- Financial industry experience plus
- Industry certifications – CCSA/CCSE, CISSP or GIAC
- Networking knowledge (i.e. routers and switches) plus
This position is anticipated to require the use of one or more High Security Access (HSA) systems. Users of these systems are subject to enhanced screening which includes both criminal and credit background checks, and/or other enhanced screening at the time of accepting the position and on an annual basis thereafter. The enhanced screening will need to be successfully completed prior to commencing employment or assignment.
