Network Engineer Security II

At LPL’s Global Capability Center, you'll find a collaborative culture where your voice matters, integrity guides every decision, and technology fuels progress. Your skills, talents, and ideas will redefine what's possible. LPL's success reflects its exceptional employees, who together pursue one noble purpose: empowering financial advisors to deliver personalized advice for all who need it. We’re proud to be expanding and reaching new heights in Hyderabad.

Join us as we create something extraordinary together.

Job Title: Network Engineer Security II (1st Shift)

Job Overview

LPL is seeking a Senior Network Security Engineer for their network security products, including Palo Alto, Fortinet, and Cisco Next-Generation firewalls. This individual will be part of a team of technical engineers, overseeing implementation, and operations management of network security products operating in a multiple data center environment offices, and the cloud. The position directly relates to securing and protecting LPL, our Advisors, and their clients.

Responsibilities

• Implement and Tier 2 support solutions focused on Palo Alto and Cisco FTD, Fortinet firewalls
• Tier 2 support of operations of VPN and Cisco ISE/NAC remote access environment
• Implementing firewall solutions in the AWS cloud environment using an auto-scaling design
• Troubleshooting complex network security issues, identifying the root cause of issues and developing continuous improvement of the platform
• Security hardening of platform devices reduces vulnerability footprint
• Managing firewall service requests (MACD)
• Manage and optimize logging of firewall traffic and rule-based activity
• Maintain security baseline standards, design documentation, and diagrams
• Automation development using scripting languages such as Python or PERL and leveraging APIs for data exchange
  
  

• 5+ years of engineering and administering an enterprise-level Palo Alto and/or Fortinet environment
• 5+ years of Networking experience and knowledge of network devices (routers, switches, etc.), including such topics as HTTP headers, ISO layers, and TCP flags.
• Ability to generate and read packet captures for troubleshooting of data traffic flow.
• Fundamental knowledge of encryption, including HTTPS decryption and re-encryption, to examine data traffic content.
  
  

• Excellent troubleshooting skills and ability to identify root causes of issues and provide solutions.
• Strong interpersonal and presentation skills, both oral and written, with the ability to articulate and educate others about complex technology with business acumen.
• Accurate diagramming and documentation skills.
  
  

• Bachelor’s degree in computer science or related field.
• Palo Alto Professional Security Certifications desirable such as PCNSE.
• Security and Network Certifications such as CISSP, CEH, CCNP, CCNA, CCIE are desirable.
• Enterprise level Network Routing protocols such as OSPF and BGP configuration.
• Familiarity with industry standard automation tools