Job Description

Duties include providing support to Citi perimeter security infrastructure, comprised by firewall, proxy, and SASE technologies; day to day firewall, proxy and SASE changes execution from request handling and scheduling to implementation in the production environment based on customer requirements; problem analysis and resolution from non-hardware routine issues to critical failures within established service level targets.

Citi’s perimeter security infrastructure includes firewall, proxy, remote access and intrusion detection systems. Investigation, documentation and resolution of outages to critical business systems that may be caused by or impacting these systems; escalation of issues and tracking of progress in conjunction with other Citi technical resource teams; working incidents escalated from the level 1 team which may include scheduling multiple changes, software upgrades, or configuration activities to resolve.

Skills and Qualifications:

Desired platforms and technical experience:

• CheckPoint and Palo Alto firewall and intrusion detection devices
• BlueCoat and Squid proxies
• Zscaler SASE and ZTE
• Active Directory
• Networking and routing with BGP
• Traffic analysis: tcpdump/pcap/wireshark
• Linux/Unix
• Strong understanding of Enterprise Change, Incident and Problem Management is required.
• Experience utilizing ServiceNow is a plus.

Also desired/emphasized are:

• Strong troubleshooting and communication skills
• Strong analytical and quantitative capability with attention to detail and ability to work in a demanding and environment.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.

The candidate will be required to analyze customer requirements to ensure all standards, policies and guidelines are upheld from the information security perspective and support routine compliance activities. Eventually, the candidate will need to support technology improvements, such as new infrastructure install and hardware/software upgrades.

Relevant Certifications: CheckPoint, Juniper firewalls. CISSP or CCNA/CCNP as a plus.

Education Level Required: Bachelor's Degree in Computer Science, Information Systems or related fields preferred.

Years of Related Experience: 6+ (C12), 3+ (C11)