Ellington Solutions is seeking out qualified candidates that will:

• Possess advanced knowledge and practical experience in the deployment and management of routers, switches, and firewalls.
• Take initiative in troubleshooting the organization's intricate Network Infrastructure.
• Familiarity with Check Point NGX, IPS/IDS, Rapid7 Nexpose, and SolarWinds.
• Manage Layer 2 and Layer 3 protocols, including routers and switches, focusing on maintaining sufficient data throughput by monitoring network activities and addressing performance issues.
• Actively monitor and troubleshoot connectivity issues within the FTE’s Network Infrastructure, which encompasses campus, roadside, backbone, LAN, Walk-in Centers, partner networks, and third-party connections.
• Evaluate the FTE's network architecture and design, including failover capabilities, and suggest modifications to enhance performance and reliability.
• Ensure that network segmentations are properly structured to safeguard sensitive environments, including PCI, financial, and customer data.
• Utilize SolarWinds to establish dashboards for proactive monitoring of the entire Network Infrastructure and to troubleshoot performance and connectivity issues, incorporating management reporting dashboards.
• Verify that all routers, switches, and firewalls within the network infrastructure are transmitting logs to the SIEM by reviewing SIEM logs.
• Actively monitor and implement patches and updates across all routers, switches, firewalls, and other supporting equipment within the network infrastructure.
• Collaborate with the Network and Security Operations team in designing Cloud architecture, covering aspects such as capacity, failover strategies, stability, and security design.
• Conduct vulnerability scans on the network infrastructure to ensure that perimeters and network segments, including databases, applications, and server environments, are adequately protected.
• Maintain precise inventory controls supporting the FTE's network infrastructure.
• Create and update network infrastructure diagrams, documenting any changes along with relevant documentation, including change control approvals.
• Support the SRCO team in investigating, triaging forensic analyses, and preserving evidence in relation to cybersecurity incidents.
• Assist with threat intelligence and hunting by utilizing existing security tools.
• Ensure adherence to established standards, policies, and configuration guidelines set by the SRCO and industry best practices, such as NIST.

Requirements

The qualified candidate will have:

• U.S Citizenship (Required)
• Certified Information Systems Security Professional CISSP (REQUIRED)
• Cisco Certified Network Associate CCNA (REQUIRED)
• Cisco Certified Design Associate CCDA (Preferred)
• Cisco Certified Internetwork Expert CCIE (Preferred)
• A bachelor's degree in a related field
• Relevant experience may be considered in lieu of a bachelor’s degree
• At least five (5) to seven (7) years of practical experience with layer 2/3 routing protocols, including handling complex issues, as well as the deployment and management of routers and switches, troubleshooting, and cloud infrastructures such as AWS and Azure platforms
• A minimum of five (5) to seven (7) years of experience with Unix (RedHat), Windows, VMware, and other platforms
• At least two (2) to three (3) years of experience with vulnerability scanning tools, preferably Rapid7 Nexpose