Network Security Architect

The Illinois Municipal Retirement Fund (IMRF) is the second largest and best funded-statewide public pension system in Illinois located in Oak Brook. IMRF partners with local units of government to provide death, disability and retirement benefits for working and retired public employees. IMRF receives no funding from the State of Illinois.
IMRF is seeking a Network Security Architect who possess a strong understanding of Palo firewall rulesets and Security Architecture. This position has a focus in hands on Palo firewall work.
The position will join an existing department of over twenty infrastructure technology staff and will report to the Network Services Team Lead. This team supports our mission critical business systems, workstations, telecom, SQL, security, VMware, core switching, firewalls, and load balancers.
IMRF has an enterprise-wide modernization initiative in progress, which will completely replace our current applications with Line of Business, CRM, ECM, and BI applications integrated in a flexible Service Oriented Architecture. Key technology platform components of the new solution include VMware, SQL Server, Windows Server, Cisco networking, enterprise SAN, and Avaya VOIP.
Our technology efforts support IMRF's vision of providing the highest quality retirement services to our members, their beneficiaries and employers. The successful candidate will enjoy the challenge of joining the infrastructure team that is critical to achieving that vision.
Responsibilities:

• Troubleshoot and resolve Palo firewall traffic rulesets.
• Perform Palo firewall maintenance, upgrades, and apply configuration and security standards/policies within a defined Change Management process.
• Review domain level rights and privileges and perform changes to the same where appropriate.
• Serve as a technical security expert for the infrastructure department.
• Monitor and manage Network Security and performance in SolarWinds and other automated tools.
• Create and update technical documentation of Infrastructure procedures as needed.
• Participate in the patch management of the IMRF network.
• Weeknights and weekend work is performed as an overtime function scheduled as needed. Our outage windows are scheduled weeknights after 6pm and all weekends.
• Collaborate in assessing current and expected IMRF infrastructure needs, configuration, maintenance, and optimization.
• Work with stakeholders and other technical teams to collect business and technical requirements and design/deliver enterprise level solutions.

• Bachelor's degree (BA or BS) from a four-year college or university in Computer Science or a related technical field

• 10 years of experience in IT security and networking (including Palo Alto firewalls)

• Palo Alto Networks certifications
  • Palo Alto Networks Certified Network Security Administrator (PCNSA)
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Security
  • SANS GIAC Certified Perimeter Protection Analyst (GPPA)
  • SANS GIAC Security Essentials (GSEC)
• Cisco Networks
• Cisco Certified Security Professional - Security (CCNP - Security)

• Networking: CCNA or CCNP
  • Extensive experience configuring Cisco Routers/Switches
  • F5 experience
  • Thorough understanding of advanced Network infrastructure

• Generous insurance benefits, including medical and dental
• 35-hour base work week, Monday-Friday
• Death, disability, and pension retirement benefits as a member of IMRF
• Paid vacation, 12-13 paid holidays, and 2 personal days
• Tuition reimbursement
• Business casual attire