POSITION SUMMARY
The position will focus on the core functions of network and security support engineering: planning implementation analysis maintenance administration and reporting for Retail and Corporate environment as well as Supply Chain. This individual will be required to apply solid technical business and problem solving skills in any situation. Through initiative leadership and teamwork this individual will create productive relationships with buainess units and internal IT teams. This position will have the opportunity to perform tactical decision making that supports the strategic direction of Sephora IT and the Network team. This person will exercise these responsibilities in compliance with Sephora policies and along with industry best practices.
RESPONSIBILITIES
- Engineer/Support 700 stores Corporate offices and Distribution Centers (warehouses)
- Work closely with business and application owners on design troubleshooting support and documentation of new application deployment and enhancements
- Architect engineer and troubleshoot Palo Alto/Fortinet firewalls and services
- Engineer application and network designs to ensure compliance with corporate security policies and security best practices
- Attend planning meetings including Discovery/Discovery Results/Architecture Council and provide suggestions on design.
- Provide technical expertise in business initiatives and projects
- Manage and lead internal IT initiatives and projects from other groups
- Participate in oncall rotation
- Create endtoend project tasks and expect to be accountable for entire project completion
- Configure and install network and security related hardware and software
- Provide daytoday support of the LAN (Cisco) WAN and WLAN (Aruba) network
- Experience in WAN environments installing and troubleshooting circuit problems (MPLS OCxx T1 DS3) and traffic shaping/QoS
- Perform scheduled and emergency network maintenance
- Manage and maintain network and security documentation through collaborative applications
- Work with application owners on troubleshooting issues even though it may not be network related issue
- Troubleshoot network and provide Post Incident Writeup (PIR) and present to management
- Provide strong customer service and facilitate collaboration between project teams and clients.
- Proactively identify isolate and resolve network problems to avoid minimal impact to the business
- Perform internal audits and reviews to ensure compliance with all security policies and procedures which includes internal penetration and vulnerability scans
- Evaluate new and emerging network security trends products and technologies
- Create and update Jiras for Kanban and project related tasks
SKILLS AND KNOWLEDGE REQUIRED
- To meet the above responsibilities we are looking for a well rounded individual with communication working with stakeholders and working/tracking projects endtoend.
- NOT all specific technologies are required
- Technologies:
- Building applications in Azure
- Experience configuring/troubleshooting of Fortinet PAN or other layer7 Firewalls Experience with corporate and supply chain buildout
- Load balancer experience (F5 and other lb technologies)
- Able to lead P1/P2 triage calls
- Experience using tools to gather data to present to manager/leadership:
- Soft Skills Verbal and written communication are key attributes to be successful in this position
- Be able to business needs and translate technical tasks
- Must be results orientated selfmotivated and possess highenergy
- Must be customerserviceminded and tactful when dealing with customers. Ability to establish and maintain effective working relationships with customers vendors coworkers employees and upper management
- Must be proactive and come to management with suggestion on what we should be doing. Cannot be a person waiting for directions/instructions only guidance.
- Must love documentation including:
- Visio/Lucidchart
- Tracking tasks using Jira/SmartSheet/Onenote
- Highly Recommended
- Experience setting up configuring of enterprise monitoring applications Splunk Solarwinds .
- Automation experience a big plus (Ansible Python)
- Identify opportunities for automation within software processes including configuration backup and troubleshooting processes.
- Setup/configure monitoring tools such as Solarwinds is a big plus
- Business Analyst experience EXTREMELY helpful
- Flexibility in work schedule offhours for project implementation and 7 by 24 oncall support
- Helpful
- SDWAN/SASE
- Aruba Clearpass experience a must including 802.1X Radius AAA policy Management
- Aruba wireless experience a plus
- Security including SSL Certificate administration
- Must be comfortable working in a fast paced environment with shifting priorities
- Experience with Security preferred including experience in the setup tuning and management of security appliances (next gen firewalls IPS/IDS ACS web filters)
- Experience with VPN technologies (both IPSec and SSL)
- Familiar with Layer 38 troubleshooting
- Knowledge of diagnostic networking tools (do you know how to read a packet capture)
- Flexibility in work schedule offhours for project implementation and 7 by 24 oncall support
SKILLS RECOMMENDED
- Relevant industry certification a plus (CISSP CCSP CCNP CCWP)
- Aruba certifications and/or experience highly desirable
- Strong understanding network security concepts technologies and trends
- Experience in WLAN design implementation and security
- Knowledge in the following areas a plus (load balancing compression technologies SOA applications network software protocols)
- 2 year working with Splunk
- 6 years of experience with networking and security technologies
- 8 years of overall information technology experience
- Bachelors degree in technology related field or equivalent experience
Required Skills : Wireless networking experience o Clearpass is a MUST HAVE Scripting experience is a MUST HAVE o Ideally with Ansible o HDscript Python are okay