Lead Network Security Engineer - Remote

Join a dynamic team at the pulse of global markets, where we deliver innovative software and service solutions for essential financial reporting and capital markets transactions. At DFIN, we are a values-driven organization that empowers you to build a fulfilling career while bringing your authentic self to work every day. Our "Win as One" mentality ensures that our team's success is directly linked to Client, Shareholder and Employee Satisfaction.
Recognized by Newsweek as one of AMERICA'S MOST LOVED WORKPLACES® for three consecutive years and a Built In Best Places to Work for six years, we are committed to our employees' total wellbeing. Enjoy competitive compensation, a flexible workplace, comprehensive benefits, and opportunities for professional growth. Bring your passion and talents to DFIN - because being YOU thrives here.
Summary:
Plan, engineer, configure, implement, and troubleshoot security and network infrastructure necessary to maintain and secure global enterprise network. Provide subject matter expertise for a variety of technology projects with an emphasis on security technology. Partner with internal and external business units as necessary to provide security assurance against cyber attacks, to include denial of service campaigns, web defacement, unauthorized access, data loss and other cyber activities that could negatively impact the good name and reputation of Donnelley Financial Solutions and our customers. Provide operational support for security and network infrastructure. Proactively identify security vulnerabilities and mitigation opportunities within the security and network infrastructure. Deliver an Ideal Customer Experience by always executing with quality and excellence. Demonstrate an aptitude for maintaining strong security market awareness as well as to recommend, implement, and manage cutting-edge technologies.
Responsibilities:
• Conduct high-level and low-level designs for Enterprise security and network infrastructure projects.• Implement Enterprise infrastructure changes.• Interact with partner organizations/departments to design network or system solutions for DFIN Enterprise infrastructure. make recommendations on investments for network hardware and services.• Evaluate new security and network technologies and recommend future strategy to management.• Experience in architecture and design of a global enterprise network.• Actively participate and identify changes needed in Enterprise infrastructure strategy reviews, design sessions and configurations necessary to achieve the technology organization goals.• Analyze network & system response and determine tuning recommendations to improve performance, adhere to capacity management expectations, and provide performancemanagement reporting.• Manage effective issue identification and resolution processes; serve as a senior escalation point for all Enterprise network and security operations issues with a degree of quality that results in absolute root-cause determination and drive vendor partners to provide quality assurances by requiring immediate bug fixes, software updates, etc., as necessary to ensure an Ideal Customer Experience at all times.• Perform 24x7x365 advanced tier 1-3 support, to include but not limited to: troubleshooting, off-hour maintenance activities, problem resolution, and on-call rotation while ensuring adherence to the Donnelley Financial Solutions Change Management policy.• Create and maintain documentation as it relates to network systems, design, configuration, support, and processes for all supported network infrastructure. Create and maintain Disaster Recovery plans; ensure they are tested and updated regularly.
Responsibilities (cont.):
• Participate in the on-call rotation.• Assist with defining requirements in support of budget plans and make recommendations for ways to improve performance and reduce costs. Develop business cases that support changes to network and system infrastructure.• Develop network and system performance tools and integrate them into the existing infrastructure. Design an effective test plan for any new/changed service provider infrastructure.• Ensure communication of process and procedure changes to key stakeholders.• Support identification and collection of metrics and performance reporting processes. Determine Key Performance Indicators and infrastructure standards • Identify process improvement areas and develop the improvement initiatives.• Research current industry technology to better facilitate vendor and partner communications• Subject Matter Expertise (SME) for relevant technologies.• Requires minimal supervision to perform job duties.• Develop and deliver cross-training to other members of the team. Participate in and encourages a knowledge-sharing environment both within and outside the department.• Assist in budget planning process.• Establish and maintain working relationships with the technical, business, customers, associates, sourcing counterparts and vendors as necessary to proactively identify needed changes.• Participate in process improvement initiatives.• Actively participate in industry/vendor forums to guide product development activities.• Manage individual workload and deliver to agreed-upon milestones.
Qualifications:
The Lead Network Security Engineer is expected to demonstrate technical knowledge of the skills listed below. The technical skills will depend on his/her specific responsibilities within the organization.
Minimum 6 to 8 years relevant work experience
Technologies:
Firewall: Minimum of 6 years of working knowledge - Palo Alto Networks, Cisco ASA, Checkpoint Firewall
Routers and Switches: Minimum of 6 years of working knowledge - Cisco all models
VPN: Minimum of 6 years of working knowledge - IPSec/SSL-based solutions, Site to Site VPN
Intrusion Detection and/or Prevention: Minimum of 2 years of working knowledge - Radware Defense Pro
Load balancers: Minimum of 6 years of working knowledge - Radware LB, F5 LB
NAC: Minimum of 4 years of working knowledge
O/S: Minimum of 2 years of working knowledge - UNIX (Solaris, BSD); Linux, Windows variants
Scripting Languages: Minimum of 3 years of working knowledge - Perl, Bash, Ruby, Python, Terraform
Application Software: Minimum of 2 years of working knowledge - Syslog, MySQL
Network tools: Minimum of 6 years of working knowledge - TCP Dump, Wireshark, Iperf, Solarwinds
Network Protocols: Minimum of 6 years of working knowledge - TCP/IPv4, TCP/IPv6; Routing protocols such as BGP, OSPF.
Business Applications: ServiceNow, Zendesk,
Office Automation: Minimum of 6 years of working knowledge - Microsoft Outlook, Word, Excel, PowerPoint, MS-Project and Visio, GSuite, Lucid Charts
Minimum 4 years of working knowledge of Azure, AWS and SaaS products.
Travel required (+/-5%)
Preferred Skills:

• Bachelor's degree in related technical preferable
• Understanding of the business and/or industry
• Experience re-engineering / process improvement
• Knowledge of SD WAN is preferred.
• Strong change management skills; change agent
• Excellent problem solving / analytical skills and knowledge of analytical tools
• Excellent written and verbal communication skills
• Ability to create / define metrics that accurately reflects the current state of a given process
• Experience supporting mission-critical infrastructure in a fast-paced environment
• CCNP preferable but not required
• PCNSE Preferable but not required
• Any other certification is a plus

It is the policy of Donnelley Financial Solutions to select, place, and manage all its employees without discrimination based on race, color, national origin, gender, age, religion, actual or perceived disability, veteran's status, actual or perceived sexual orientation, genetic information or any other protected status.
If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access jobs.dfinsolutions.com as a result of your disability. You can request a reasonable accommodation by sending an email to [email protected] .
At DFIN, protecting your identity is a top priority. Please be aware of scammers impersonating DFIN recruiters. DFIN recruiters will never request personal information via email or text. You will only receive a text from us if you've already been in contact. All automated messages will come from [email protected] . If you ever have doubts about the legitimacy of any communication from us, please do not hesitate to reach out for verification via t [email protected] (this email is for general TA questions and is not used for updates on your application status). #BI-Remote