IT Infrastructure - Network Security Engineer at Stonehage Fleming

OVERALL PURPOSE

• We are seeking to appoint an Associate – Network Security Engineer in our IT Infrastructure department based in either Cape Town or Johannesburg. This is a technical hands-on job, which requires solid technical knowledge of firewalls and network infrastructure.
• The position reports to the Head of Infrastructure and Security and is based in Switzerland. Other working relationships include all members of the IT team, users worldwide and external suppliers.

Key Responsibilities    
PRINCIPAL ELEMENTS & ACCOUNTABILITIES

• Maintain firewalls clusters and manage objects, groups and rules
• Review firewalls rules on a regular basis
• Troubleshoot applications and communications flows 
• Assist IT personnel with network flows troubleshooting
• Establish and maintain VPN connectivity with external partners
• Troubleshoot end-to-end network connectivity problems and performance issues
• Participate to maintenance and updates of critical firewalls during off-peak hours
• Monitor firewalls, networks and critical communications systems
• Maintain and document business and technical procedures, keep documentations current
• Participate to projects and to the modernization of infrastructures
• Participate to infrastructure on-call incidents and tickets resolution

QUALIFICATIONS AND EXPERIENCE

• Written and oral English language skills
• At least 5 years of previous hands-on experience with networks
• Previous experience in a similar position – experience in a NOC or SOC highly appreciated
• University degree or at least 3 years of professional experience in a similar role
• Vendor certifications such as NSE/PNCSE, CCNA/CCNP, JNCIA/JNCP highly valued

SKILLS

• Excellent knowledge of TCP/IP networks (ACLs, VPN, Switching, STP, VRRP, vPC, MC-LAG)
• Excellent documentation skills (Confluence, Visio, Netbox)
• Excellent knowledge of firewall (Checkpoint, Fortigate, Palo Alto Networks)
• Good knowledge of dynamic routing protocols (BGP, OSPF, EIGRP)
• Good knowledge of common network monitoring tools and protocols
• Good knowledge of Authentication, Authorization and Accounting (Radius, TACACS+)
• Knowledge of LAN and WAN networks (MPLS, SDWAN, Spine-Leaf and Three-Tier)
• Knowledge of highly-secure enterprise network environments
• Knowledge of virtualization and hypervisors
• General knowledge of scripting and automation

COMPETENCIES AND BEHAVIOURS

• Sharp analytical mind and good numeracy skills
• Team player with good ability to work in teams
• Good communication skills in small groups
• Ability to work autonomously and to multitask
• Open to flexible out-of-hours work for critical maintenances
• Passionate about his work

Education Level    Degree or Equivalent
Experience Level    Proven Relevant Experience