Previous Job
Senior IT Security Architect in Spring, TX - HCL America/ Entergy
Ref No.: 18-33147
Location: Spring, Texas
Position Type:Contract
Experience Level: 7 Years
Start Date: 05/07/2018

Title: Senior IT Security Architect
Job location: Spring, TX
Duration: Contract
Job Description:
·         Experience in Network/Firewall Segmentation
·         Minimum of 10 years of experience working in a large complex Check Point firewall distributed environment.  A background with Utility or large Finance companies a plus.
·         The Ideal candidate should be able to support all aspects of firewall administration.   To include: hardware, software, encryption, VPN, IPS, DLP and day-to-day operations of firewall rule sets.
·         Hands on knowledge on Check Point firewall upgrades from IPSO, SPLAT to GAIA and VRRP to ClusterXL
·         Experience with Dynamic Routing Protocols: OSPF, BGP & RIP
·         Strong understanding of IPv4 and subnetting
·         Should have excellent troubleshooting skills on all aspects of firewall and network related operational issues.
·         Should be familiar troubleshooting firewall issues using from the CLI using tcpdump, Wireshark and fw monitor
·         Experience in performance tuning and optimization of Check Point firewalls and firewall policy's
·         Good knowledge on overall Network security products and technologies.
·         Experience with Implementation and build of Check Point firewalls from scratch
·         Experience working on Firewall Rule base analyzers and optimization approaches.   Basic understanding and exposure to at least one of the firewall rule base analyzers for example: Tufin SecureTrack
·         Prior experience with IT security systems such as Source Fire, Blue Coat, Symantec, McAfee Nessus and Juniper preferred.
·         Familiarity using change and configuration management tools for example: Service Now, Service Desk, Remedy, etc.
·         Knowledge and understanding of global security policies
·         Coordinate deployment of network security infrastructure with other members of IT organization.
·         Ensure that excellent customer service is being provided to project teams on a consistent basis.
·         Strong verbal and written communication skills are required due to the dynamic nature of discussions with customers, vendors, and other engineering and product teams
Detailed understanding of the following technology: 
·         Check Point firewall management via Provider-1
·         Check Point VSX
·         Check Point GAIA, IPSO & Secure Platform
·         Check Point Site-to-Site VPN
·         Cisco ASA/PIX site-to-Site VPN
·         Cisco routers and switches
·         Juniper Firewalls and IDP
·         Blue Coat Proxy
·         McAfee Web Gateways
·         Integration with monitoring and configuration management tools, such as Spectrum, eHealth and Splunk
Required Certifications: Check Point Certified Security Administrator (CCSA) Check Point Certified Security Expert (CCSE) Certification.  Candidates with these additional technical certifications are preferred: Cisco Certified Network Associate (CCNA) Cisco Certified Network Professional (CCNP)