Network Engineer Iii - Security

Learn what makes QTS a unique place to grow your career!
The Network Engineer III - Security is primarily responsible for providing security for our data center production network infrastructure. This position will utilize in-depth knowledge of networking and security best practices to protect QTS infrastructure and QTS customers against security risks, which include malicious attacks and vulnerabilities that could compromise the security of the network. This individual will need a fundamental understanding of physical/virtual networking and firewall management, including any associated automation. The candidate must be well versed in Network technologies and display a desire to continuously grow and improve both technical and soft skills.
RESPONSIBILITIES, other duties may be assigned.

• Troubleshoot & support networking concepts and protocols such as: BGP, OSPF, VLAN/VXLAN, STP, HSRP/VRRP, IP sub-netting, and routing while increasing your understanding of a wider set of protocols and advanced technologies.
• Enforce network security policies and implement best practice security strategies on both QTS infrastructure and QTS customer infrastructure.
• Design, configure, implement, and troubleshoot firewall, security, and network infrastructure.
• Configure/troubleshoot server load balancing mechanisms and algorithms
• Configure, maintain and troubleshoot site-to-site and client-to-site VPNs
• Work with Cisco routing and switching platforms like ASR 9000, Nexus, Catalyst
• Configure, test, and troubleshoot platforms like Cisco ASA, Pal Alto NGFW, F5 LTM/GTM, Citrix Netscaler, SDWAN technologies
• Work with multi-tenant infrastructure and virtual service technologies such as context-based firewalls and load balancers
• Perform security reviews and audits to help QTS distributed engineering organization with network security issues
• Provide analysis and recommendations for best practice network security
• Demonstrate current industry knowledge as it pertains to the following; Management of peering/IX/NAP issues, a proficient level of understanding in contemporary network architectures, networking security protocols/procedures, and network scaling/capacity issues.
• Manage assigned tickets to ensure SLA compliance and customer satisfaction
• Troubleshoot network port configuration issues
• Understand prefix and access lists, read and comprehend traceroutes
• Create A, C, and MX records using basic knowledge of DNS
• Triage and escalate tickets according to QTS policy
• Work with the 24x7x365 Operations Service Center and be flexible in availability as needed, participate in on-call rotation

BASIC QUALIFICATIONS

• BS degree in Computer Science, Management Information Systems, Engineering or other related field or equivalent professional experience
• Seven or more years of progressive IT engineering experience
• Five or more years of professional Network Engineering experience
• Experience working with network security components such as firewalls, VPNs, load balancers, IPS/IDS in an operational setting.
• Advanced proficiency with SSL and IPSEC VPN configuration and setup. This includes both secure remote access VPN (client) as well as site-to-site (L2L) VPN.
• Advanced proficiency with at least two of the following protocols: BGP, OSPF, HSRP, EIGRP, MPLS
• Solid understanding of anti-DDoS and IPS/IDS solutions.
• Knowledge of packet analysis and troubleshooting using TCP Dump, Packet Capture using PCAP tools such as Wireshark and Sniffer Pro.
• Knowledge of Juniper, Palo Alto, F5 Big IP and Citrix Netscaler (ADC) technologies.
• CCNA certification (or equivalent)
• US Citizenship for this position is required by law due to federal customer contracts

PREFERRED QUALIFICATIONS

• CCNP or JCNP (Juniper) certification
• CISSP or CCNP-Security certification
• PCNSA or JNCIA-Junos certification
• Two or more years of experience with a Service provider, preferably in a Data Center environment.
• Advanced ability with route optimization software automation policies and monitoring
• Advanced ability to perform code upgrades and vulnerability management
• Advanced knowledge with network device HA configurations
• Advanced skill level with Cisco iOS, iOS-XR, and/or Nexus OS (NX-OS)
• Hands on experience configuring, testing, troubleshooting on Cisco routing, switching, and security platforms like Cisco ASA, ASR 9000, Nexus, Catalyst.

KNOWLEDGE, SKILLS AND ABILITIES

• Strong communication skills. Ability to convey technical requirements and concepts to technical and non-technical clients and corporate audience.
• Excellent written and oral communications, problem solving and process management skills.
• Ability to work well within a team environment in a matrixed organization.
• Strong interpersonal skills with the ability to interface with all levels of the organization

TOTAL REWARDS
This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending and HSA accounts; paid holidays; paid time off; paid volunteer days; employee assistance program; tuition assistance; parental leave; military leave assistance; QTS scholarship for dependents; wellness program, and other company benefits.
This position is Bonus eligible.
We conform to all the laws, statutes, and regulations concerning equal employment opportunities and affirmative action. We strongly encourage women, minorities, individuals with disabilities and veterans to apply to all of our job openings. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, or national origin, age, disability status, Genetic Information & Testing, Family & Medical Leave, protected veteran status, or any other characteristic protected by law. We prohibit retaliation against individuals who bring forth any complaint, orally or in writing, to the employer or the government, or against any individuals who assist or participate in the investigation of any complaint or discrimination claim.
The "Know Your Rights" Poster is included here:
Know Your Rights (English)
Know Your Rights (Spanish)
The pay transparency policy is available here:
Pay Transparency Nondiscrimination Poster-Formatted
QTS is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to talentacquisition@qtsdatacenters.com and let us know the nature of your request and your contact information.