Job Description

Brooklyn, United States | Posted on 04/16/2025 Job Location: Brooklyn, NY 11201 (Onsite) Note: Candidates must have State, City, or Federal experience . Each candidate must submit a government-issued ID (Driver’s License or Passport) and provide three professional references (names, official emails, and phone numbers). Job Description: The City of New York – DoITT is seeking a seasoned Network Security Engineer to join the team for a 24-month engagement. The ideal candidate will possess hands-on experience in configuring and managing complex network environments, ensuring robust security, and collaborating with cyber teams to implement proactive security measures. This role demands deep knowledge of Cisco ASA & Firepower, F5 load balancers, routing protocols, and packet analysis tools in high-security government or enterprise environments. Specialty Areas: Network Security & Firewall Engineering – Manage and secure firewalls (Cisco ASA, Firepower, Zscaler), VPNs, and cloud networks. Load Balancing Solutions – Design and implement application load balancing with F5 LTM, GTM, BIG-IQ and VMware NSX . Cloud Network Security – Secure cloud infrastructures in Azure and AWS , including Express Route configurations. Monitoring & Analysis – Use Splunk, Wireshark, tcpdump, and Netscout for network diagnostics and security risk analysis. Identity & Access Control – Configure and manage Cisco ISE for endpoint authentication and policy enforcement. Responsibilities: Collaborate with NYC Cyber Command to identify, assess, and remediate security vulnerabilities. Utilize Splunk and other tools to correlate security events and identify network threats. Design and maintain Cisco ASA and Firepower firewall solutions, including VPNs and tunnel configurations. Support and troubleshoot routing and switching infrastructure (Cisco L2/L3). Plan and implement load balancing strategies (F5, Avi/NSX Load Balancer). Manage access policies using Cisco ISE and cloud firewall tools. Document SOPs, network diagrams, and procedures using Visio or Lucidchart . Perform packet-level traffic analysis to monitor threats and resolve network issues. Ensure timely resolution of network outages and collaboration with vendors to meet SLAs. Skill Matrix: Skill Experience (Years) Cisco ASA & FirePower (FMC/FTD/FXOS) 5+ F5 Load Balancing (LTM, GTM, BIG-IQ) 5+ Packet Analysis (Wireshark, tcpdump, Netscout) 5+ Cisco Routers & Switches (L2/L3) 5+ Routing Protocols (BGP, OSPF, EIGRP) 5+ Zscaler Security Policies Required Cisco ISE Configuration Required Azure/AWS Cloud Network & Firewall Mgmt Required Splunk SIEM & SPL Required VMware NSX / NSX Load Balancer Required Mandatory Requirements: Minimum 5 years of experience in network security , including Cisco ASA & FirePower . At least 5 years of experience with F5 load balancing technologies . Strong background in routing protocols (BGP, OSPF, EIGRP). Proficient in packet-level analysis and network diagnostics. Experience with Cisco routers, switches, and L2/L3 troubleshooting. Preferred Qualifications: Industry certifications: Cisco CCNA/CCNP , CompTIA Security+ , or similar. Hands-on experience in VMware NSX , NSX Advanced Load Balancer . Familiarity with Splunk and SPL scripting . Experience managing cloud infrastructure in Azure/AWS . Prior work in education or government environments . Excellent communication and documentation skills. Submission Requirements: Government-issued ID (Driver’s License or Passport) Three Professional References (Names, official emails, phone numbers) #J-18808-Ljbffr Jobleads-US

Job Tags

Similar Jobs