Staff Network Security Engineer - On Site

$125,000 - $150,000/Yr

Danaher - Chaska, MN

Full-time - Mid Level

Chaska, MN

Computer and Electronic Product Manufacturing

About the position

The Staff Network Security Engineer at Beckman Coulter Diagnostics is responsible for the architecture and service delivery of network security components, ensuring the security of enterprise network devices across a global scale. This role involves hands-on technical work and strategic planning to enhance network security, particularly in high-risk environments. The engineer will work within a team to address complex security challenges and contribute to the overall technology roadmap for network security.

Responsibilities

• Participate in the definition of the technology roadmap for network security components such as firewalls, intrusion prevention, and SSL VPN services.
• Participate in strategy definition and execution for enterprise network segmentation to address high-risk environments.
• Translate business requirements for secure applications by designing, implementing, and managing firewall policy.
• Take escalations for unique and complex technical problems that operations teams are unable to solve, performing root cause analysis and knowledge transfer.
• Participate in security incident response as part of a larger cross-functional team.

Requirements

• 9+ years experience in IT.
• 5 years of experience in the networking field at a global enterprise scale, including WAN, LAN, or data center environments.
• Advanced knowledge and 5 years of hands-on administration experience with Next-Generation Firewall (Preferred Palo Alto).
• Advanced knowledge and 2 years of hands-on administration, designing and supporting SSL VPN services in a large enterprise environment (Preferred Palo Alto Prisma Access).
• Proven hands-on track with at least one of the following network authentication service engines: Aruba ClearPass, Cisco ISE, Pulse Secure Policy Manager.

Nice-to-haves

• Previous experience in optimizing security policy and migrating existing policy from one FW vendor to another.
• Hands-on experience on Juniper Security Director, Juniper Next Generation Firewall, or Checkpoints.
• Experience with network automation tools such as Ansible or Chef, and scripting using Python, Bash, or other tools for automating changes on network/security devices.

Benefits

• Paid time off
• Medical insurance
• Dental insurance
• Vision insurance
• 401(k) plan