Notice of Job Opportunity in Costa Mesa, CA

Title: Network Engineer

NDS Americas is a world leader in digital security systems for television and broadband media to customers around the world including North, South and Central Americas.  Our solutions include conditional access, interactive television and data broadcast systems.  We have an immediate opportunity for a Network Engineer in Costa Mesa, CA.

This is an opportunity for a motivated engineer to become a member of the IT team. We are seeking a customer service oriented individual who will perform a variety of network techniques.

• This successful candidate will administer, troubleshoot, monitor and document the LAN, WAN, internet and NOC infrastructure to ensure continuous 24/7 operations.
• Solid 5 years experience with progressive day to day technical network support experience in an enterprise environment is required.
• Three years of experience with Cisco equipment (switches, routers, ASA, wireless) plus firewalls and VPN’s from a variety of vendors.
• BS degree in Computer Science, Engineering or technical field with excellent written/oral communication skills.
• Strong knowledge, implementation and troubleshooting with VPN’s(IPSEC and SSL), WCCP, multicast and authentication systems is preferred.
• Linux and Windows network configuration is a Plus.
• CCNP, CCSA and CISSP certifications are preferred.
• Domestic/International travel may be required.
• No relocation assistance provided.  Local candidates only. 

GENERAL PURPOSE  
The core function of this position is to research, plan, implement and maintain mission critical carrier network security infrastructure.  This position will focus on the implementation of security policy and technical measures designed to protect the core IP, MPLS, and Voice over IP network elements.  This position will also participate in the development of processes and relationships with other departments within TelePacific communications to meet the needs in planning, designing, building, and managing the network security.

SUPERVISION RECEIVED:
Works under the supervision of the Network Architecture Manager

SUPERVISION EXERCISED
None
 
ESSENTIAL DUTIES AND RESPONSIBILITIES
Maintenance, installation and optimization of the following elements

• Research, develop and implement new security strategies to address vulnerabilities in current and future network elements, products, and services and ensure compliance with regulatory requirements
• Maintain currency with industry, vendor, and peer supplied vulnerability information.  Take proactive action to ensure security of network elements when a potential risk is identified.
• Assist in monitoring, investigating, documenting and resolving identified security weaknesses, and recommend solutions for improvement in all areas of the network including non-customer facing elements.
• Collaborate with all organizations within TelePacific to identify weakness in management access security, password policies, and potential social engineering risks.  Take proactive action to reduce risk.
• Represent TelePacific’s interests and experiences at industry conferences and forums
• Provide assistance to individual network Engineering teams to resolve conflicts between security requirements and product offering requirements.
• Develop bi-weekly reports which include, but are not limited to, current TelePacific network risks, analysis of general industry risk, developing threats which will require action in the short term.  Develop monthly reports identifying long term risks and plans to address long term risks.
• Maintain active Top Secret Clearance and interact with local law enforcement and national government agencies for security and CALEA compliance.

PERIPHERAL DUTIES

• Lead cross-domain, cross-functional matrix project teams to implement solutions according to established milestones and budgets
• Maintain an exceptional level of documentation including diagrams, security standards, manuals and white papers
• Provide accurate and timely reports on all project deliverables
• Participate in Budgetary and Planning exercises
• Other relevant tasks as directed by department leadership

DESIRED MINIMUM QUALIFICATIONS
Education and Experience:

• Graduation from an accredited four‑year college or university.
• Seven (7) years of experience in networking/telecommunications, 5 years specifically related to IP MPLS and VOIP engineering security.
• Any equivalent combination of education and experience.
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Internetwork Expert Security a strong plus
• Active Top Secret Clearance or ability to complete SSBI and attain status a requirement

NECESSARY KNOWLEDGE, SKILLS, AND ABILITIES

• Strong engineering and operational experience in large Service Provider networks
• In depth understanding of SIP, MGCP, H323, and H248 with a focus on voice network security
• Strong understanding of Acme Packet Session Directors, policy routing, realms, security, and various configuration options
• Strong understanding of Broadworks Server policies, routing network elements, and security
• Strong understanding of Soft Switch technologies such as Genband C3, Nortel CS2k, Taqua, and/or Sonus with a demonstrated ability to provide a secure network environment for voice services.
• Strong experience capturing and analyzing packets with Wireshark, Empirix Hammer XMS and other common network analysis equipment
• In depth understanding of Cisco and Juniper Carrier network operating systems including but not limited to Cisco IOS, IOS XE, IOS XR, NX-OS, ASA, and Juniper JunOS.
• In depth understanding of Cisco ASR9000, Cisco CRS, Cisco ASR1000, Juniper M Series, Juniper MX Series, Cisco ME3800x, and Cisco ASA 5585-X security.
• In depth experience with carrier network routing and transport protocols including BGP, ISIS, OSPF, MPLS, VPLS, PPPoE, and L2TPv3 with a strong focus on security.
• Understanding of storage area network technologies, particularly iSCSI, and security measures to ensure data protection
• Experience with SIP Peering and interconnects between carriers
• In depth understanding of Linux and Solaris security with a demonstrated ability to balance operating system security with application accessibility requirements including LDAP, Mail, DNS, SNMP, Syslog, PostgreSQL and other infrastructure and support applications.
• Strong understanding of PCI compliance requirements and experience in implementing
• Must be able to manage multiple assignments, set priorities and meet deadlines
• Must have strong writing and communication skills; able to communicate with technical and non-technical personnel

SPECIAL REQUIREMENTS
This position requires limited short-term travel assignment with short notice.

TOOLS AND EQUIPMENT USED

Personal computer, including word-processing, database and spreadsheet programs; calculator, telephone, copy and fax machine, Microsoft Office and Visio applications

PHYSICAL DEMANDS

• The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• While performing the duties of this job, the employee is frequently required to sit and talk or hear. The employee is occasionally required to walk; use hands to finger, handle, or feel objects, tools, or controls; and reach with hands and arms.
• The employee must occasionally lift and/or move up to 50 pounds. Specific vision abilities required by this job include close vision and the ability to adjust focus.

 
WORK ENVIRONMENT

• The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• The noise level in the work environment is usually moderately quiet.

SELECTION GUIDELINES
Formal application, rating of education and experience; oral interviews and reference check; job related tests may be required.

The duties listed above are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related or a logical assignment to the position.

The job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirements of the job change.