Network Security Engineer

Job description

Founded over 35 years ago, First Quality is a family-owned company that has grown from a small business in McElhattan, Pennsylvania into a group of companies, employing over 5,000 team members, while maintaining our family values and entrepreneurial spirit. With corporate offices in New York and Pennsylvania and 8 manufacturing campuses across the U.S. and Canada, the companies within the First Quality group produce high-quality personal care and household products for large retailers and healthcare organizations. Our personal care and household product portfolio includes baby diapers, wipes, feminine pads, paper towels, bath tissue, adult incontinence products, laundry detergents, fabric finishers, and dishwash solutions. In addition, we manufacture certain raw materials and components used in the manufacturing of these products, including flexible print and packaging solutions. Guided by our values of humility, unity, and integrity, we leverage advanced technology and innovation to drive growth and create new opportunities. At First Quality, you’ll find a collaborative environment focused on continuous learning, professional development, and our mission to Make Things Better®. We are seeking a Network Security Engineer for our First Quality Enterprises, LLC, working remotely . This position is responsible for the support and management of the network security infrastructure including Palo Alto Next-Generation Firewalls, Network Access Control platform, and micro segmentation platform. This position will also assist in auditing configurations on routers, switches, and wireless equipment. Primary responsibilities include: Daily monitoring and management of firewall infrastructure, VPN, NAC platform, micro segmentation platform, and other security related tools. Collaborates closely with the information security team and network team to establish and enforce security policies and configurations across firewalls and NAC consistent with the overall security posture. Provides detailed analysis and troubleshooting of firewall rule sets as they relate to application performance and availability. Supports the change management process for all proposed configuration changes affecting security platforms by reviewing existing configurations to determine the overall impact of the change on the enterprise network, then executes accordingly. Attends and participates in team and departmental meetings providing updates and insight into ongoing projects, initiatives, and incidents. Ensures adherence to IT Architecture principles and guidelines along with published Information Security Standards (ISS). Collaborates with outsourced partners in delivery of network security services. Uses 3rd party tools like Algosec or Tufin to analyze firewall rule sets to look for misconfigurations and gaps, along with firewall policy optimization. Performs micro-segmentation using firewalls and other 3rd party tools like Illumio or Guardicore. Responds to and appropriately addresses support calls, incidents, and requests related to the network and security infrastructure. Configures and optimizes firewall logs that are sent to the SOC. Adheres to Standard Operating Procedures (SOPs) and maintains daily checklists related to operational activities. The ideal candidate should possess the following: Minimum 3+ years' networking experience and 2 years of hands-on firewall engineering activities. Experience with managing Palo Alto Firewall infrastructure in an enterprise environment. Extensive hands-on work configuring and troubleshooting within the Palo Alto "Panorama" and SCM (Strata Cloud Manager) interfaces. PCNSA, PCNSE, or CISSP certifications are preferred. Strong understanding of VPN (site to site, remote access client, IPSec, IKE, tunnel modes, SSL, Tunnels between Firewalls) with broad troubleshooting experience. Experience with micro-segmentation in a virtualized Data Center environment. Familiarity with Network Access Control (NAC) concepts and fundamentals. Basic understanding of network engineering, SDWAN, and local and wide area (LAN/WAN) technologies and topologies. Possess fundamental knowledge of Network Infrastructure: Cisco routers, switches, Cisco and Aruba wireless. Strong troubleshooting and problem-solving abilities. Ability to work within a 24/7 environment across multiple time zones. Ability to work in a fast-paced environment and embrace change. Results oriented, customer focused. Ability to work well independently and in a team environment. Highly motivated, ability to execute. Solid organizational and time management skills. Trustworthy with high degree of credibility. Solid written and verbal communication skills, including the ability to communicate to both business and technical individuals. Able to collaborate effectively with a variety of cross functional teams. Domestic travel 10%. What We Offer You We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive: Competitive base salary and bonus opportunities Paid time off (three-week minimum) Medical, dental and vision starting day one 401(k) with employer match Paid parental leave Child and family care assistance (dependent care FSA with employer match up to $2500) Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby) Tuition assistance Wellness program with savings of up to $4,000 per year on insurance premiums ...and more! First Quality is committed to protecting information under the care of First Quality Enterprises commensurate with leading industry standards and applicable regulations. As such, First Quality provides at least annual training regarding data privacy and security to employees who, as a result of their role specifications, may come in to contact with sensitive data. First Quality is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, sexual orientation, gender identification, or protected Veteran status.