Lead Network Security Specialist Infrastructure

Serves as senior technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. Leads the engineering, installation, maintenance and administration of technical aspects for the OSG Infrastructure team supporting Critical Infrastructure. Responsible for translating business requirements into secure network solutions or process designs., * Provide timely responses to all incidents, tasks and requests assigned to meet Service Level Agreements.

• Work with internal clients, suppliers/contractors, project teams and other technical staff to identify, design and support technical solutions, focusing on firewalls.

• Design, plan and implement changes to the environment for improvements or projects

• Provide maintenance of infrastructure technologies following the change management process

• Lead the technical implementation plans in support of infrastructure technologies

• Leads others to solve problems

• Leads contractors to deliver services to projects and or operational duties as needed

• Leads functional teams or projects as assigned

• Lead the evaluation, selection, and testing of hardware and software products

• Maintain regulatory compliance under NERC/CIP guidelines

• Maintain high quality security controls surrounding the critical SCADA systems

• Perform/coordinate special assignments from OSG Infrastructure Management

• Education and Experience Required:

• MS Technical Related Degree with 5+ years' technical experience; OR
• BS Technical Related Degree with 8+ years' technical experience; OR
• AS Technical Related Degree with 12+ years' technical experience
• Position requires a minimum of ten (10) years' experience working with infrastructure solutions in an enterprise environment
• Position requires professional experience with more than one of the following areas: Data Center Operations, Disaster Recover/Business Continuity Planning & Execution, Security & Compliance Management, Infrastructure Operational Policies & Procedures, and/or Technical Project Coordination
• Position requires Operational experience in an Enterprise Environment configuring and maintaining Cisco Routers/Switches/Firewalls such as Cisco Nexus 9K, Cisco Catalyst, Cisco ASR Routers, Cisco 4K Routers, Cisco ISE, Cisco Firepower, Cisco ASA
• Position requires Operational experience in an Enterprise Environment configuring and maintaining Next generation firewalls such as Checkpoint and Palo Alto

• Skills/ Abilities:

• Expert within network infrastructure, operations & network security
• Proficient in professional standards and trends within area of expertise
• Proficient in deploying Checkpoint, Palo Alto, Cisco ASA firewalls along with implementing VPN's
• Knowledge of multiple security technologies, to include network security, NAC, Micro segmentation, network security architecture
• Implementing security technologies such as SAML and PKI Infrastructure
• Network Access Control systems in a large enterprise
• Experience with authentication systems such as RADIUS, TACACS+, SSO, LDAP Experience planning, researching, and developing security policies, standards, and procedures
• Experience with architecting in cloud environments (AWS, Azure, and GCP)
• SD-WAN and other tunneling\encryption transport technologies
• Network Security Automation and DevOps
• Strong Routing and Switching experience (BGP, OSPF, VPC, VXLAN, vain traffic engineering, Multicast, etc.

Preferred Qualifications

• Desired Skills/ Abilities:

• Experience with packet capture software such as Wireshark, WinDump, tcpdump, etc.
• Experience with installing and configuring Citrix Netscalers in an Enterprise High Availability environment
• Experience with installing and configuring Cisco ISE in a distributed deployment with multiple personas
• Experience with Zero Trust Architecture
• Experience working in a regulated environment
• NERC/CIP experience a plus
• Experience with Cisco Nexus Dashboard Fabric Controller (Formerly DCNM)
• Experience using Solarwinds Orion platform suite of tools

Competencies

• Growth & Continuous Improvement

• Initiative & Change

• Focused on Results

• Customer Centric (internal and/or external)

• Communication

• Collaboration

• Leadership (people managers/leaders)

NY STATE ELECTRIC & GAS CORP Mobility Information Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country. At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law. If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at careers@avangrid.com. Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions. This does not include those that will work for Avangrid Power. Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee's management.