Staff Network Security Engineer

You're a seasoned Network Engineer with experience in the architecture & design of hybrid enterprise networks, and a primary focus and interest area in security. You will provide design, implementation and ongoing support, serving as the senior leader for network security architecture and design. Your work ethic is top notch and your boss will never need to micromanage you. You're uncomfortable with monotonous days, preferring a dynamic environment with ever-changing needs. You're a passionate seeker of new technology, eager to learn and stay up-to-date with the latest happenings in the tech world. You have experience with writing detailed documentation, mentoring those less tech-savvy about the great new features that you've just deployed. You never reuse a password, ever. 

To be successful in this role, you must have both broad and deep, hands-on expertise in building, operationalizing and scaling hybrid enterprise networks spread across geographies and cloud. You must also experience monitoring and responding to emerging network/cloud related threats and also automating detection/response activities. You must be able to coordinate and work effectively with Engineering teams, DevOps, IT, Technology and Service Vendors and Customers on aspects related to threat management. 

What you will do:

• Design Plume’s hybrid (on-prem + cloud) network architecture, based upon requirements feedback from the Development Teams, Administrative Users and the Executive Teams. 
• Develop and Implement secure and resilient designs based upon widely accepted standards. 
• Lead the design, maintenance, and security of IT strategy, including deployment, configuration, patching, and on-call support rotation. 
• Facilitate knowledge sharing and self-service by creating and maintaining detailed and comprehensive documentation and diagrams detailing our internal networks. 
• Lead the definition of standards and continual fine-tuning of the standards and processes related to IT and Networking. 
• Be part of the larger threat monitoring team to monitor and manage cybersecurity threats to the Plume network.
• Be available for maintenance windows/upgrades and assist greater IT with large scale projects, issue troubleshooting, and expertise around network design and security

Who you are: 

• Bachelor's degree in Information Security, Computer Science or related field or equivalent work experience.
• Minimum of 5+ years of broad experience in hands-on implementation of network design and operations 
• Minimum of 3+ years of experience with AWS in a hybrid network configuration. 
• Expert level experience in proactive network threat detection/monitoring and response strategies
• Strong understanding and ability to troubleshoot and maintain network infrastructure, to include routers, wireless, network security (firewalls, web proxy, email security gateway, etc.), and LAN switches
• Strong knowledge with public cloud architecture, such as AWS and containerization technologies such as kubernetes
• Programming/Scripting experience with one or more of the following languages: C/C++, Python, Java, Go, Bash etc. is a plus.
• Demonstrated experience and support knowledge of MacOS, Windows, Linux desktops and servers
• Experience with automation tools and methodologies associated with DevOps and CI/CD pipelines.
• Experience with security testing methodologies and tools (ex: penetration testing, fuzzing, vulnerability assessment etc.)
• Experience with cyber security framework policies, processes and controls; such as: NIST CSF, ISO27001, SOC2, CIS, FIPS 140-2 etc is a plus
• Networking certifications such as Cisco Certified Network Professional (CCNP) and Security certifications such as CISSP, OSCP, GCIH etc is a plus
• Exceptional interpersonal & communication skills enabling you to communicate effectively with employees at all levels across the globe. 
• Proven ability to work unsupervised, exercise leadership, and influence change