Security Engineer

•Participate in the implementation of security controls in a Public Safety ESINET and NENA compliant NG911 system. •Ensure the security controls are adequate for all Public Safety Answering points (PSAPs) in the commission of the 911 program at PSAP. •Develop security configurations. •Establish security best practices as well as review all vendor designs ensuring compliance with security standards and governance models established by the City Agency . •Provide expertise in integration and engineering of Security platforms. •Manage test cases and identify risks associated with system integrations •Work with vendors to integrate security platforms into Public Safety infrastructure •Architect security controls. •Assess Active Directory security roles and policies •Configure IDS/IPS security policies •Troubleshoot level 3 security related issues . •Configure security policies in DNS •Examine current firewall policies and ensure completeness and accuracy Lead resolution of security incidents MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered •Minimum of 12 years Security Engineering experience •Strong network security experience •Strong project management experience •Must be able to lead projects •Any compliance experience, specifically HIPAA, is highly desirable •Bachelor's degree in computer science, information technology or related field. •Should be able to utilize security frameworks like NIST and MITRE. •Strong knowledge of security management tools to facilitate troubleshooting, i.e. Wireshark, Net brain, Extra hop, Net witness etc. •Strong Identity and Access Management background •Experience with configuring DNS •Strong experience in performing security risk assessments •Understanding of the various VPN technologies •Knowledge of resilient designs to ensure high availability •Knowledge of IPS/IDS design as standalone hardware or as a feature within firewalls •Ability to create reports using KRI and KPI •Experience with Next Generation Firewalls including Palo alto, Fortinet, Forcepoint, etc. •Work with vendors, carriers, and other technical groups to implement new security controls and troubleshoot existing controls. DESIRABLE SKILLS/EXPERIENCE: •Understanding of SIP security design and implementation for Voice/Video and Data. •Understanding for firewall policies and application security •Experience in auditing/assessing data network security design. •Experience in auditing/assessing applications security design.