JOB SUMMARY: The Sr. NetOps engineer will have a strong network security focus and will be responsible for contributing to overall network security infrastructure and posture, contribute to and lead network security projects, and provide escalation support for network security related issues.
Key duties include managing and maintaining firewalls and rule sets, troubleshooting connections through firewalls and other security devices, investigating and supporting network security escalations, providing insights on potential network security improvements, and provide operational hand-offs for completed projects and implementations. Some travel between office locations may be required on an as-needed basis for projects.
The Sr. NetOps engineer must possess the ability to troubleshoot and document solutions to complex problems and execute project tasks within a team environment. A successful engineer will professionally work with other teams in the organization while keeping management appraised of the status of his/her projects and any escalations.
This position will require the engineer to be onsite at the Bensalem location for first 90 days and can then transition towards to a hybrid schedule. This position will be part of an on-call rotation that requires the engineer to be on-site while on-call.
RESPONSIBILITIES/TASKS:
• Lead and contribute to projects, implementations, and integrations.
• Create documentation and diagrams for new projects and updated documentation for existing implementations and systems where necessary.
• Provide escalation support for network security infrastructure including firewalls, identity management systems, and other network-based security systems.
• Lead efforts to reviews, audit, and remediate network security devices for compliance with standards.
• Support requests from other teams and business units within PFFCU.
• Analyze and diagnose reports of network security related problems while documenting root causes, providing recommendations for remediation, and performing corrective actions.
• Be able to take immediate control of incidents and escalations and drive them to resolution.
• Be able to work with vendors for problem escalation and drive them to resolution.
• Lead and ensure timely completion of both short term and long-term projects.
• Participation in an on-call rotation.
• Lead vulnerability remediation efforts within the team.
• Actively participate in security device reviews and hardening.
• Actively participate in security architecture and topology reviews to identify potential issues, plan for future expansion, and identify potential improvements for PFFCU’s security posture.
• Actively participate in review and analysis of proposed software and hardware modifications, including vendor software patches and user requests.
• Develop a strong working knowledge of the business side of PFFCU and be able to interface effectively with all groups.
• Demonstrate a deep understanding of the business impact of system changes and be able to clearly explain and relate their impact to affected users.
• Document internal support processes and procedures and build runbooks for new systems.
• Actively contribute to security designs and processes in order to ensure the integrity and availability of all PFFCU’s systems.
• Work closely with all teams in Information Systems on projects of all scopes, including complex and cross-functional efforts.
• When appropriate engage and collaborate with third party services.
• Ensure timely completion of projects and deployments in conjunction with the Business Plan.
• Other duties as assigned by the Management.
QUALIFICATIONS:
• 10+ years’ hands on experience with network and network security infrastructure in a predominantly Cisco environment.
• 10+ years’ experience working on large projects, implementations, and integrations.
• Demonstrated understanding of core network security technologies and philosophies such as zero trust architectures, NetFlow, firewalls, data loss prevention, EDR/XDR, identity management, and secure network access mythologies.
• Possess a strong foundation in TCP/IP communications.
• Demonstrated understanding of IP routing and protocols including OSPF and BGP.
• Demonstrated understanding of WAN technologies used in a multi-site and remote work environment including MPLS, IPsec, SDWAN, and remote access VPNs.
• Demonstrated understanding of VXLAN fabrics and multi-VRF environments.
• Active CCNP Security or equivalent certifications with a focus on Security are desired.
• Possess strong knowledge of current network security tools and technologies.
• Possess strong knowledge of network monitoring tools and technologies.
• Possess strong and effective written and verbal communication skills.
• Possess excellent customer service skills and be able to work independently and within a team in a highly customer-focused environment.
• Bachelor’s degree in technical field; or related experience and/or training; or equivalent combination of non-academic education and experience is desired.
• Ability to work on after-hours changes, including some evenings and occasional weekends.
• Ability to travel to office and branch locations as needed.
• Ability to lift 50lbs and rack/stack equipment.
• Must possess strong project management skills.
• Must possess effective written and verbal communication skills.
• Must possess a high level of comfort with troubleshooting complex issues.
• Must possess excellent customer service skills and be able to work independently and with a team in a highly customer-focused environment.
SKILLS/KNOWLEDGE/ABILITIES REQUIRED:
• Strong project skills required, specifically the ability to maintain focus and complete projects with multi-month timeframes and ability to handle multiple concurrent projects.
• Strong vendor management skills.
• Expert level skills using Cisco security technologies.
• Expert level knowledge of network security technologies and methodologies.
• Expert level troubleshooting skills.
• Ability to think logically and visualize abstract concepts.
• Ability to clearly communicate technical information to individuals at all levels of the organization and with vendors.
• Ability to participate in an on-call rotation.
• Ability to work varying hours, including some evening and weekend work for projects and changes.
• Core hours are Monday - Friday 8:00 AM – 4:00 PM.
#PFFCUBO
Skills Required
- 10+ years of hands-on experience with network and network security infrastructure in a predominantly Cisco environment
- 10+ years of experience working on large projects, implementations, and integrations
- Understanding of zero trust architectures, NetFlow, firewalls, data loss prevention, EDR/XDR, identity management, and secure network access methodologies
- Strong foundation in TCP/IP communications
- Understanding of IP routing and OSPF and BGP protocols
- Understanding of WAN technologies including MPLS, IPsec, SD-WAN, and remote access VPNs
- Understanding of VXLAN fabrics and multi-VRF environments
- Strong knowledge of network security and network monitoring tools and technologies
- Active CCNP Security certification or equivalent security-focused certification
- Strong project management skills and ability to manage multiple concurrent, multi-month projects
- Strong vendor management skills
- Expert-level Cisco security technology, network security, and troubleshooting skills
- Strong written and verbal communication skills
- Excellent customer service skills and ability to work independently and collaboratively
- Bachelor’s degree in a technical field, related experience or training, or equivalent combination of education and experience
- Ability to participate in an on-call rotation and work evenings and occasional weekends
- Ability to travel to office and branch locations as needed
- Ability to lift 50 pounds and rack or stack equipment
- Ability to troubleshoot complex issues and communicate technical information to all organizational levels and vendors
What We Do
PFFCU is a member-owned financial cooperative serving police officers, firefighters, and other members in Greater Philadelphia and Southern New Jersey. It provides a broad range of personal banking and lending products, including checking and savings accounts, mortgages, and personal loans, alongside digital banking and financial education. Earnings are returned to members through higher savings yields, lower loan rates, and fewer fees, reflecting its people-over-profits approach.
