Description

You will manage security infrastructure and incident response protocols for complex network environments.

Responsibilities

• Implement network segmentation, isolation, and AAA protocols using Cisco ISE and Stealthwatch.
• Manage vulnerability and patch management lifecycles alongside threat detection and assessments.
• Maintain OT environment protection tools including Nozomi, TDI, and Gigamon systems.
• Execute incident response plans and deploy deception technologies such as honey pots and honeynets.
• Administer Active Directory, enforce Windows Server hardening, and manage Privileged Access Management.

Required Skills

• 12 years of experience in cybersecurity engineering.
• Deep expertise in network segmentation and isolation.
• Active Directory and Windows Server administration and hardening.
• Cisco ISE, Stealthwatch, and AAA implementation.
• Proficiency in vulnerability and patch management.
• Experience with OT environment containment tools such as Forescout.
• Knowledge of routing and switching, including BGP, OSPF, and Cisco switching.
• Familiarity with Physical Access Control Systems and Video Management Systems.
• Virtualization and infrastructure management using VMware and Virtual Switches.
• Endpoint credential management and Privileged Access Management (PAM).
• Cybersecurity incident response planning and execution.
• Threat detection and vulnerability assessment capabilities.
• Implementation of Deception Technology (Honeypot/Honeynets).
• Data analysis and DWDM/SONET networking knowledge.
• Nozomi, TDI, and Gigamon maintenance and management.
• US Citizenship is required.

Preferred Skills

• Experience with SONET.

Key Skills

Education

Any graduate