Sr. Network Security Engineer

This role is a mix of Network & Security looking for someone with a broad range of experience across firewall, network, infrastructure and security. They will handle all end point technologies, work closely with the infrastructure team, network team and Store network team (Meraki).

Projects:
Migrating from Juniper to Palo Alto (installing Panorama Firewall Management)
Wiring closet remodel old complex wiring closet, old switches/poorly designed cabling needs to be redone, build in a new rack, configured/installed, etc.
Wifi analysis and troubleshooting/optimization in roasting plant & warehouse (Meraki)

Job overview
The individual in this role will be responsible for design, configuration, implementation, maintenance, and administrative activities associated with the Peets Coffee network infrastructure, including firewalls, LANs, WANs, switches, routers, wireless, telecom circuits, load balancers, in both physical and virtual environments.

RESPONSIBILITIES
Network and Security Operations Administration
Perform administration of the networking infrastructure including firewalls, LANs, WANs, switches, routers, wireless, telecom circuits, load balancers, and other related network equipment in both on premise and cloud environments
Monitor network performance and reliability, proactively identify potential problems and make recommendations for upgrades and updates as necessary
Work with the Director of Information Security to implement strong network security configurations, install firmware and software patches, remediate vulnerabilities, and research security incidents
Provide support for networking issues escalated from IT helpdesk and/or system administrators
Provide technical support and maintenance for the company's PCI compliance programs
New System Deployments
Design and document network architecture for new projects and existing infrastructure
Provide deployment engineering support
Other Responsibilities
Manage vendor support relationships, contracts, purchases, and design initiatives
Provide on-call emergency 24/7 technical support as necessary
Interface/liaison with Infrastructure, BI, Digital, ERP, and Store teams on technical tasks and initiatives

REQUIRED QUALIFICATIONS
5+ years network and security engineering experience

o Experience with Cisco, Meraki, Palo Alto
CCNA, CCNP and other relevant certifications desired
Experience configuring, implementing, and maintaining the following:

o Palo Alto Networks firewalls and VPNs
o Cisco routers and switches
o Spanning-tree, HSRP, CDP, LLTP, MLT and other L2 protocols
o Meraki switches, wireless access points, and security appliances
o Azure NSGs, Express Routes, WAFs, and VNETs
o Cisco Access Control Lists and VLAN Segmentation
o PulseSecure VPNs
o Configuration of RADIUS, AAA, PKI, 802.1x solutions
o Fibre-channel SAN platforms
o Intrusion protection and detection systems
o VMware networking setup
o Knowledge of data center co-lo environments
o Routing protocols such as BGP, OSPF, and EIGRP
o Network services such as DNS, NTP, DHCP
o Network monitoring and management tools such as MRTG and SolarWinds
Ability to contribute to the design and deployment of architected security systems and platforms
Ability to troubleshoot and resolve problems using tools such as Wireshark, Cisco CLI, Ekahau spectrum analyzer, syslog
Understand Payment Card Industry Data Security Standard (PCI-DSS) network related controls
Experience working with network/security vendors is a plus

Additional Qualifications:
Must have excellent verbal and written communication skills
Ability to work efficiently in a collaborative team environment
Proficient time management and organizational skills
Must be detail-oriented, organized, and able to effectively perform multiple tasks
Must demonstrate effective problem-solving skills
Experience in working as a single point of contact, and making critical decisions as needed with little or no supervision

Flexible and adaptable to change
Excellent documentation skills, including using Visio or draw.io for network diagrams
Proficient in MS Office: Excel, Word, Outlook, Power Point and other Window and Mac software tools
Time management skills, strong ability to multi-task, follow up and manage competing priorities independently
Ability to establish and work with cross-functional teams
Ability to work effectively within a team environment and independently
Ability to work flexible schedule during weekdays and weekends as necessary
College degree in related field or relevant experience