Network security engineer [h1.location_city]

An extraordinarily talented group of individuals work together every day to drive TNS' success, from both professional and personal perspectives.Come join the excellence!

Overview

As a senior member of the Network Architecture team, you are responsible for the design, documentation and deployment of services within a global Managed Service Provider IP / MPLS network.

Primary focus is on designing solutions such as large-scale SD-WAN, IPSec and MPLS VPN, IP multicast solutions and across wired and wireless comms.

The role comes at an exciting time for TNS as we integrate services into private- and public-cloud environments, with a focus on automation and orchestration of services and look to transform to a NetDevOps model, where this role will play a key part.

The position requires technical expertise across multiple areas and functions – ability to work with pre-sales and internal teams on requirements gathering, creation of high-level and detailed design specs, ability to work alongside development teams to automate configuration, delivery and support processes, and ownership of overall projects.

Selected candidate will also work with strategic vendors for solution evaluation and customization and will provide third-level Operations support for incident resolution, and leadership over critical operational maintenance works.

Responsibilities

Design and test new technologies, features, and solutions and documenting the results so that they can be repeated by members of the Implementations team and supported by the Network Operations Center

Work closely with Pre-Sales Engineers and Product Marketing to understand customer requirements and develop scalable, consistent and supportable technical solutions

Work with existing and new vendors to evaluate platforms and solutions for integration in TNS’ product suite.

Provide third-level support to TNS’ Network Operations Center staff, and Implementations teams

Develop and document detailed lab test plans and reports, document procedures and new configurations, provide training for operations departments and other engineers, provide written troubleshooting, debugging, and problem detail to vendors.

Interact with vendors to resolve problems and bugs, and perform hands-on testing, configuration, and troubleshooting

Qualifications

Essential Skills :

The following technical expertise is sought, transferable skills in other areas of network and infrastructure design and support will also be strongly considered :

Experience with architecture and provisioning of solutions within MPLS or SD-WAN based environments

Extensive hands-on experience with the design and configuration of Fortinet FortiGate devices, particularly within SD-WAN topologies

Experience with network automation and orchestration tools and features and DevOps methodology (e.g. Terraform, Ansible, JSON, Nautobot, Vendor-specific tools like Arista Cloudvision, Cisco DNA Center)

Proficient in IPSec (including DMVPN and RRI) design, configuration, operation, and troubleshooting

Experience in designing cloud-based architectures in AWS / Azure / GCP

Proficient in IP Multicast design, configuration, operation, and troubleshooting

Experience in network design and implementation based on high-level customer requirements

Extensive TCP / IP and routing knowledge (BGP, OSPF, ISIS, EIGRP, PIM, BFD).

Experience with Customer Edge features such as Network Address Translation, VRRP / HSRP

Proven ability to create and maintain comprehensive documentation for all implemented solutions

Expert-level troubleshooting and debugging skills

Experience in vendor product evaluation (hardware, software, service provider)

Experience and technical understanding of broadband service deployments (xDSL, Cable).

Ability to design, plan, and coordinate network maintenance and installation windows.

Hardworking, focused, thorough, and punctual

Ability to provide written and verbal presentations on technical topics to corporate peers and management

Experience providing support for Tier1 and Tier2 environments

Self-motivated; able to work independently or within a team environment with minimum instruction from management

Able to work flexible hours as required and provide on-call support

Desirable Skills :

Fortinet, Cisco and / or Juniper certifications (NSE Level 4 / 5 / 6 / 7, CCIE / CCNP-SP, JNCIE, JNCIP)

Experience with AAA, Tacacs+, Radius, and CA / PKI

Experience with Voice over IP, Dial Services (Async / PPP, ISDN), Wireless services (CDMA, EVDO, GPRS, EDGE, 802.11b / g / n), Server Load-Balancing (F5)

Data Center design and support (Cisco Nexus, Arista, Juniper)

Experience with Server Load-Balancing (F5, Netscaler, AWS ALB / SLB)

Experience of GIT, Jenkins, and other DevOps tools and Agile working practices

Creating and deploying CloudFormation templates.

Automating using other scripting / automation languages such as Python, Ansible and vendor-specific tools like Arista Cloudvision, Cisco DNA Center is beneficial

Firewall configuration experience with PIX / ASA, IOS, or Netscreen / JunOS

Designing, building and automating AWS / GCP / Azure architecture

Designing, building and automating NSX-V and / or NSX-T networking

Designing, building and automating Openstack (Canonical or RedHat)

UNIX / Linux Experience

For this role in the US, we anticipate paying $140,000k - $180,000K. This role is eligible for variable pay, issued as a monetary bonus or in another form. Any compensation range provided for a role is an estimate determined by available market data. The actual amount may be higher or lower than the range provided considering each candidate’s knowledge, skills, abilities, and geographic location. TNS offers a competitive benefit package including medical and dental coverage, life insurance, paid holidays and vacations, and a 401K plan with company match.

If you are passionate about technology, love personal growth and opportunity, come see what TNS is all about!

TNS is an equal opportunity employer. TNS evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability / handicap status or any other legally protected characteristic.