Senior Network Security Engineer

You have a life. We like that about you.At OCLC, we believe you'll do the best work of your life when you're living the best life possible.We work hard to build the technology that connects thousands of today's libraries. But we also work hard to make a job at OCLC a meaningful part of a balanced life- not a substitute for one.Technology with a Purpose. OCLC supports thousands of libraries in making information more accessible and more useful to people around the world. OCLC provides shared technology services, original research and community programs that help libraries meet the ever-evolving needs of their users, institutions, and communities. With office locations around the globe, OCLC employees are dedicated to offering premier services and software to help libraries.The Job Details are as follows:We are seeking an experienced and highly skilled Sr. Network Security Engineer to join our organization. The successful candidate will manage the daily operations of network security tools and appliances both in the cloud and on-prem as well as mentoring and supporting the daily operations of the network engineering team. As a Sr Network Security Engineer, you will be responsible for implementing and maintaining the security infrastructure of our network systems both on-prem and in the cloud. You will contribute to security efforts by network engineering and collaboration efforts with global security and other departments as needed to ensure the confidentiality, integrity, and availability of our network resources. The ideal candidate should possess in-depth knowledge of network security technologies including CloudFlare Magic Transit and WAF, F5 ASM and AFM, DDOS, Palo Alto next gen firewalls, and AWS security groups and firewalls, strong network troubleshooting abilities, and a proactive approach to mitigating risks.Responsibilities:Analyzes and secures applications in Cloudflare Web Application Firewall including rate limiting, bot management, DDoS configuration, and harvesting mitigationConfigures and maintains the F5 Active Security Management and Advanced Firewall Management platform for on-prem and internal WAF and firewallContributes to enhancement of the Palo Alto Next Gen firewalls and migration off of Checkpoint firewallsParticipates in design/review sessions with other teams to maintain network security policies as applications and infrastructure evolvesImplements monitoring policies, procedures and standards relating to network availability and securityRepairs and recovers from hardware or software failures. Conducts emergency support and troubleshooting of troubleshoots firewalls, network links, hardware problems, or applicationsPrepares firewall/network security gear for deployment in the data centers or AWSParticipates in the analysis and implementation of 3rd party solutions for OCLC applications with the ability to understand the impact and analyze the risk.Design and implement network security solutions, including firewalls, intrusion detection systems, virtual private networks (VPNs), and other security appliances, to protect the organization's network infrastructure.Contributes to the security efforts of the network engineering team, providing guidance, mentoring, and technical expertise.Works with the global security team to enforce network security policies, standards, and procedures to ensure compliance with industry regulations and best practices.Participate in regular security assessments and audits to identify vulnerabilities and recommend appropriate security measures.Monitors network traffic and security logs for potential threats and take proactive measures to prevent security breaches.Investigates and respond to network and security incidents, including analyzing root causes, implementing corrective actions, and documenting lessons learned.Collaborates with cross-functional teams to integrate security controls into network architecture and ensure secure network connectivity for various systems and applications.Stays up to date with the latest network threats, vulnerabilities, and technologies, and provides recommendations for improving the organization's security posture and resiliency.Participates in the development and execution of disaster recovery and business continuity plans. Assist in the evaluation and selection of third-party vendors and solutions related to network security.Qualifications:Bachelor's degree in Computer Science, Information Technology, or a related field or equivalent experience. Relevant certifications (e.g., CISSP, PCNSE, PCCSE, CCNP Security) are highly desirable.Proven experience as a Network Security Engineer or in a similar role, with at least 5 years of experience in designing, implementing, and managing network infrastructure.Strong demonstrated knowledge of Palo Alto and F5 devices and technologiesStrong knowledge of network security principles, protocols, and technologies, such as firewalls, IDS/IPS, VPNs, encryption, authentication, access control, WAF, DDOSProficiency in network infrastructure design, implementation, and support, including routers, switches, load balancers, and other network devices.Experience with network monitoring and security tools, such as SIEM, packet analyzers, vulnerability scanners, and penetration testing tools.In-depth understanding of TCP/IP, routing, switching, and network protocols.Effective communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.Proactive mindset, with the ability to anticipate and mitigate potential risks.Experience working in a fast-paced and dynamic environment, with the ability to prioritize and manage multiple tasks simultaneously.Working Conditions: Normal office environment.ADA/EAA: The above statements cover what are generally believed to be principal and essential functions of this job. Specific circumstances may allow or require some people assigned to the job to perform a somewhat different combination of duties.