Description
- Oversee company’s global network infrastructure – design, analyze, implement secure measures in a project-oriented team comprised of both IT and Information Security professionals.
- Maintain the global network devices, including switch, router, firewall, wireless controller, Meraki System, AP, etc. and optimize the structure and related security policies.
- Manage networking, port configurations, port security, patching, and connectivity.
- Analyze IP network topologies for security, technical and operational vulnerabilities and risk.
- Perform day-to-day network maintenance functions, including WAN/LAN/SDWAN monitoring, configurations, & network security enforcement by using and customizing Zabbix, Statseeker, Ansible and ELK
- Research and recommend new network designs and technologies to enhance overall network performance.
- Monitor & automate global LAN/WAN/SDWAN alert notifications. Provide reports & trending analysis on voice/data performance, latency, and bandwidth utilization by using and customizing Live Action and ForeScout CounterACT appliance.
- Develop and document data/voice LAN/WAN/SDWAN topologies, IP schemes, vendor services with VISIO.
- Conduct administration of the storage area network (SAN) & Citrix technology.
- Work with IT systems admin & Info. Security peer to enforce, monitor company-wide IP protection.
- Provide detailed audit trail & access reports over the LAN/WAN/SDWAN for data/system related to R&D source code, schematics, and documentation.
- Review audit logs, configurations of IP-based network equipment such as routers, switches, firewalls, IDS/IPS and ISE, for security policy and deployment guideline compliance, operating system and security patch updates, configuration baseline.
- Renew and build/expand the network for global offices.
Requirements:
Master’s degree or foreign equivalent degree in Computer Information Technology, Information Security, or related fields.
Require two years of experience in Information Technology or Networking.
Must have experience/skills of:
- Configuring in UCS server for Cisco Hyperflex Structure deployment.
- Expertise in configuring Nexus Switch, Nexus 7000, Nexus 5000, Nexus 2000, Nexus 3000 and the future like VDC, VPC, Bidirectional Forwarding Detection.
- Experience in configuring in Cisco routers, Cisco Switches, Cisco Firewall, Cisco WLC, Cisco AP, Cisco Phone, Cisco AAA Server.
- Expertise in configuring Switch future VLAN, VTP, STP, RSTP, PVST, MSTP, CST, VRRP, HSRP, GLBP, Dot1q tunneling, storm control, Port security, Bpduguard, DHCPSnooping, Layer2 Security Protocols, IGMP, IGMP SNOOPING, PIM, IP SLA.
- Configuring Juniper Firewall, Fortigate Firewall, Check Point Firewall, IPsec VPN, SSL VPN, Access List, PAT, Static NAT, dynamicNAT.
- Expertise in configuring Cisco AAA server for authentication using radius or TACACS.
- Expertise in configuring Cisco ISE for VPN authentication and dot1x for Wireless and Wire network.
Annual base salary for this role in California, US is expected to be between $153,962 - $155,000. Actual pay will be determined on a number of factors such as relevant skills and experience, and the pay of employees in the similar role.
