Network Security Specialist

As a Network Security Specialist at Squarepoint, you will play a critical role in safeguarding the global network infrastructure, spanning regional data centers, offices, co-locations, and public cloud providers. Your primary responsibility will be to design, implement, and maintain robust security controls and services that protect the organization’s network infrastructure.

This will involve leading and participating in various projects, including the installation, monitoring, and optimization of network and security hardware, software, and communication links.

• Design and deploy comprehensive network security solutions that align with corporate security standards and requirements.
• Lead project delivery and management efforts, collaborating with internal stakeholders and external vendors to ensure successful project outcomes.
• Implement, support, and maintain network security infrastructure across all Squarepoint locations, including offices, data centers, and co-location sites, with occasional travel required.
• Provide advanced technical L3 support to troubleshoot and resolve performance and security issues, ensuring prompt resolution and minimal downtime.
• Identify opportunities for process improvements and implement automation solutions to increase efficiency, reduce manual effort, and enhance overall security posture.
• Develop innovative and creative solutions to address operational security challenges, analyzing complex problems, and providing proactive recommendations for improvement.
• Ensure the ongoing maintenance and security of systems by applying patches, updates, and performing routine maintenance tasks to prevent vulnerabilities and downtime.
• Develop, maintain, and update standard operating procedures and technical guides for security solution implementations, ensuring knowledge sharing and consistency across the organization.

• Degree in Network Engineering, Computer Science, or related Information Technology discipline
• CCNP certification or higher (CCIE preferred)
• Minimum 7 years of experience in network Engineering and project delivery, with a strong track record of successful project execution.
• Strong foundation in multiple security technologies, including network security, next-generation firewalls, network access control, micro-segmentation, and security architecture.
• Proven experience with Fortinet and/or Palo Alto security solutions, with expertise in design, deployment, and management.
• Knowledge and hands-on experience with Cisco ISE, including technical deployment and configuration.
• Advanced knowledge of routing and switching protocols, including:
• Unicast protocols: OSPF, BGP, NAT, IPSEC, and GRE
• Multicast protocols: PIM, RP, MSDP, and IGMP
• Switching protocols: QoS, HSRP/VRRP, and VPC/MLAG
• Proficiency in scripting and automation, with Python as the preferred language.
• Strong understanding of network diagnostics, monitoring, alert management, and performance tools, with hands-on experience in troubleshooting and optimization.
• Familiarity with cloud-based solutions, such as AWS, Google Cloud Platform, and Azure, as well as micro-segmentation tools like Illumio, is a plus.
• Excellent communication and interpersonal skills, with the ability to work under pressure and maintain attention to detail.
• Experience with open-source network scanning tools and certifications like PCNSA, CISSP, or similar, is desirable.

The minimum base salary for this role is $120,000 if located in New York. This expectation is based on available information at the time of posting. This role may be eligible for discretionary bonuses, which could constitute a significant portion of total compensation. This role may also be eligible for benefits, such as health, dental, and other wellness plans, as well as 401(k) contributions. Successful candidates’ compensation and benefits will be determined in consideration of various factors.