Comply to Connect (C2C) Engineer

Comply to Connect (C2C) SME - Mid - Senior

The primary responsibility for the C2C Network Engineer SME position is to plan, design, deploy, and continue to support a mission critical project for the Cisco Identity Services Engine (ISE) and Armis Agentless Device Security platform. Secondary responsibilities for the position include the deployment and continued support of enterprise network infrastructure systems in the areas of Route/Switch, Security, and Wireless technologies. Technologies utilized by the Enterprise Network Engineer SME include: Multiple Switch vendors, Juniper, Ruckus, Aruba, Cisco switches, Palo Alto Firewall, Panorama, and Wireless. The position also requires demonstrated competence in LAN/WAN technologies. Last, the C2C Network Engineer SME is responsible for the coordination of cross-functional teams in relation to the deployment and support of the physical/virtual network infrastructure, which includes technologies such as VMWare, Linux, Windows Server, physical Servers, and enterprise storage arrays.

You Will Be Responsible for:

Administration

Examples of the administrative responsibilities for the Comply to Connect (C2C) Network Engineer (SME) include, but are not limited to, the following:

• Collaboration - Participate in business planning meetings to understand and recommend the best technical, most cost-effective, network solutions that meet initial capacity, long-term scalability and growth, and performance requirements.
• Change Control - Adhere and follow all change management policies to ensure that the work is documented and meets the organizational requirements. This includes the creation, submission, review, and periodic representation of complex changes in the weekly change management meetings.
• Documentation - Document administrative items, projects, and support issues as needed to provide a reference to team members, other teams, and management.
• Incident and Request Management - As with the change management requirements, all incidents and requests should adhere to the organizational requirements. Completion of the incidents and requests should also meet the specified SLT and SLA requirements.
• Knowledge Sharing - Both the technical and non-technical knowledge should be shared to team members in both a formal and informal manner. Sharing of knowledge helps the entire team improve their skills, plus builds a cohesiveness within the team.
• Personal Development - Weather it is through certifications, training, or conferences, employees should seek ways to develop themselves in areas that are technical in nature and non-technical where relevant to the current role held within the organization.
• Project Support and Lead - Depending on the project requirement, either serve as a project lead for the Enterprise Network Engineering Team or serve as a resource for Enterprise Network Engineer Team for the deployment of Enterprise level initiatives.
• Status Reports - Submit status reports as requested to the team manager and verbally during team meetings.

Network Administration

The Technical responsibilities of the C2C Network Engineer (SME) include the design, deployment, upgrade and support of the enterprise and facility network infrastructure. Examples of the duties and responsibilities included, but are not limited to, the following:

• Network Project Documentation (NAC) - Design, plan, deploy, upgrade, and provide operational support for an Enterprise deployment of the Cisco Identity Services Engine (ISE) and Armis product for both the wired and wireless networks. In addition to the technical aspects, it includes working closely with cross-functional teams, to organize, document, and manage a long-term organizational ISE initiative.
• Network Infrastructure Support - Provide the required network support for the deployment of infrastructure network topology architecture, processes and reports. Investigate functionality issues related to application data, security and system configurations. Work with technical application teams in the review, analysis and resolution to application related performance issues.
• Network Administration - Perform the required work associated with network administration, such as the installation and configuration of network infrastructure, the deployment of backup and recovery processes for network, and the implementation of maintenance processes that ensure the continued stability and performance of network systems. Examples of specific tools associated network administration include:
• Monitoring and Optimization - Manage and participate in the monitoring, optimization and diagnosis of currently deployed network systems. Provide the appropriate documentation to management, detailing the root cause analysis of outages, performance concerns, and propose resolution and optimization options.
• Security - Work closely with the Manager and the Enterprise Security Architecture Team to plan, design, implement, support, and monitor that the security initiatives are being met for the organization.
• Technical System Support - Collaborate with the Enterprise Network Engineer Service Leads and the Enterprise Network Architect to implement, configure, and support the Enterprise Network Infrastructure. Assist in the initial capacity analysis, deployment design, and overall system architecture needed to support the Network platform and expected support activity. Provide the necessary support in the investigation and resolution of system level issues.

Qualifications :

Experience and Required Skills:

• Subject Matter Expert (SME) level experience configuring and managing endpoint profiling services to identify and categorize network-connected devices

• SME-level expertise in developing and applying posture policies to enforce security compliance requirements

• SME-level proficiency in diagnosing and resolving issues related to endpoint profiling, posture assessments, and compliance enforcement

• SME-level understanding of Cisco Identity Services Engine (ISE) profiling dictionaries and the ability to accurately classify endpoints using predefined attributes

Experience and Preferred Skills

• Must have proven skill in task management of network (10 years' experience) related projects in the Cisco Identity Services Engine (ISE) or any NAC solution. (Forescout)
• Must have proven skills with network platforms (10 years' experience) such as Cisco Identity Services Engine (ISE), Forescout, Brocade/Ruckus switches, Juniper switches, Cisco Switches, Active Directory and Firewalls in a production environment.
• Must have 6 years experience in network authentication protocols (802.1x, RADIUS, TACACS+, MACSEC, etc.)
• Must have 8 + years of experience in configuration and troubleshooting of switches and routers.
• Must have 8 years of experience with Layer 2 technology troubleshooting and configuring. (
• Proven skills in both verbal and written communication.

• Technical writing skills.

EDUCATION AND EXPERIENCE PREFERRED:

• B.A or B.S. in a degree such as Computer Science, Information Systems or Information Technology with 5 years of experience or 8 years related experience.

LICENSURE, CERTIFICATION OR REGISTRATION PREFERRED:

• CCNP Security, CCIE Security, or similar certifications.
• 8570 Compliant / CCNP OS cert
• Must be able to obtain TS security clearance.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.