IP Network Engineer

Role and Responsibilities: Designing, implementing, maintaining, and supporting local and remote portions of the PCI-DSS enterprise financial network. Deploy InfoSEC-approved DC architecture based on existing best of breed design and emerging trends. Management of Campus/Partner connectivity via LL, VPN (Virtual Private Networks) (IPSEC and SSL (Secure Sockets Layer)) & SDWAN. SSL/TLS certificate management. Application Delivery management via DEV/QA/UAT/Prod support. Triage support for all LAN/WAN/Cloud related operations and infrastructure. Manage circuit provisioning, activations, and troubleshooting. Conducting regular security assessments of the enterprise IT environment. Participating in design and strategy meetings for assigned IT projects for the enterprise. Evaluating existing communications systems, identifying deficiencies, and making network performance recommendations. Installing and configuring Physical Servers, Host VM’s and Data/Voice Communications equipment as needed inside the APAC region offices and datacenters. Responsible for performing off-hours maintenance as required. Required Skills: Network+/KCA/CCNA/CCNP/NSE4/CISSP preferred. Conversational competency in Cantonese and/or Mandarin to work with APAC partners and providers. Bachelor’s degree or equivalent education and/or experience. IPS (Intrusion Prevention System), DDOS (Distributed Denial of Service), 802.1X, NAC (Network Access Control), ISE, AV implementation experience. ISO 8583, PCI-DSS, GDPR (General Data Protection Regulation) compliance and standardization knowledge a plus. Scripting in TCL, knowledge of VMware ESX, Coralogix, Netreo, OpsGenie, Wireshark/PCAP analysis, ELK, Wazuh, Fortinet Fabric technologies (client, sandbox, gate, analyzer, VDOM’s/ADOM’s, AP’s). Dynamic Routing knowledge of OSPF, iBGP, eBGP. F5 LTM VE (Virtual Edition) Knowledge, iNAC/eNAC knowledge. Knowledge of HPE (Hewlett Packard Enterprise), Dell, Cisco Switching, Checkpoint/SPLAT familiarity. #J-18808-Ljbffr