IT Network Engineer III

Job Description and Requirements

Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented IT Network Security Engineer III to join our amazing IT Network Services team! 

The IT Network Engineer III will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233. All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.

To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.

•    Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided).
•    Must be able to provide a workspaces at home that is safe, suitable for work, and within a distraction free environment

The successful IT Network Security Engineer III is involves leading the design, implementation, and maintenance of new network security technology and systems, as well as performing senior-level configuration and troubleshooting for various network components. Additionally, it includes acting as a top-level escalation point for technical support, mentoring junior engineers, leading troubleshooting sessions, and coordinating with vendors and project management to ensure proper installation and maintenance of LAN/WAN equipment.

Essential Functions and Responsibilities:

• Determine and lead in the design of the implementation, maintenance and documentation of new network security technology and systems for corporate and branch locations.

• Perform senior level configuration and troubleshooting for routers, switches, ACI, firewall and IPS, Azure cloud, WiFi access points and WFH solutions. Has deep knowledge of concepts in a specialty area as well as knowledge of other influencing areas.

• Act as a top level escalation point for enterprise-wide technical support and customer service for LAN/WAN products and services. Is an authority on a subject matter and mentors and trains others on the team.

• Lead troubleshooting sessions with internal groups, business partners/vendors on RBFCU infrastructure.

• Interacts closely with Project Management and performs project management functions to deliver projects that are done on time and on budget. Such as, determining tasks to be completed and completing data collection; Maintaining issues and change log.

• Lead security reviews and conduct vulnerability remediation for the network security infrastructure.

• Coordinate with leadership on out-of-scope requests and trouble resolution.

• Mentor junior engineers and administrators in the design, implementation and maintenance of the network security infrastructure.

• Be a primary contact with vendors/business partners to ensure proper installation, maintenance, and troubleshooting of LAN/WAN equipment in corporate and branch locations.

• All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).

Requirements:

• High School Diploma or GED

• Minimum of five 5 years' relevant experience

• Senior level knowledge of network and ancillary systems including their installation, monitoring and troubleshooting

• Senior level knowledge of networking basics: OSI model, VLANs, IPv4 and IPv6 addressing, networking components, Access Lists, Routing protocols, NAT, VPN, etc.

• Advanced configuration and command line experience with Cisco IOS or NX-OS switches and routers

• Knowledge of telephony, PC/Server operating systems, video conferencing concepts

• Intermediate knowledge of VoIP and SIP, Wi-Fi, web applications, APIs and automation (Ansible/Python)

• Knowledge of Microsoft applications

• Knowledge of command line functions

• Working knowledge of web services & DNS

• Troubleshooting tools such as tcpdump or Wireshark

• SSH & monitoring tools

• Automation frameworks such as Ansible or Python

Skills and/or Certifications/Licensing:

• CCNP, Palo Alto, Fortinet, cloud, network or security specialty certifications

• CCNP (Cisco Certified Network Professional-Enterprise or Security)

• PCNSE (Palo Alto Networks Certified Network Security Engineer)

• Fortinet Certified Professional in Network Security

• Microsoft Azure Network Engineer Associate.

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.