Network Systems & Data Security Administrator

Network Security & Perimeter Infrastructure • Administer, configure, and manage Cisco Firepower Firewalls and Cisco FMC for centralized policy management. • Support and maintain Palo Alto firewalls including policy tuning, NAT, and traffic inspection. • Manage Web Proxy (Broadcom Bluecoat) for secure internet access and URL filtering. • Administer DDoS protection solutions (Arbor, Akamai) to ensure network resilience and availability. • Configure and support F5 platforms including: • APM (VPN Remote Access) • ASM (Web Application Firewall) • GTM (DNS / Traffic Management) • Ensure proper network segmentation, firewall rule optimization, and secure connectivity across environments. Network Access Control & Identity Infrastructure • Administer Cisco ISE (AAA Server) for authentication, authorization, and accounting. • Manage ForeScout NAC for device visibility and network admission control. • Support OneIdentity (IAM & MFA) and Microsoft Azure MFA for secure authentication mechanisms. • Administer Privileged Access Management (Delinea) to secure privileged accounts. • Manage Microsoft Certificate Authority (CA) for certificate issuance, renewal, and lifecycle management. Endpoint, Server & Core Security Systems • Administer Endpoint Protection platforms (Symantec Endpoint Protection, Microsoft Defender). • Manage File Integrity Monitoring (ChangeTracker) for critical systems. • Support secure configuration and hardening of servers, endpoints, and network devices. • Administer Email Security Gateway (Symantec Messaging Gateway). Vulnerability & Infrastructure Security Management • Administer vulnerability management tools including Qualys and Tenable Nessus. • Perform regular vulnerability scans across network, systems, and applications. • Coordinate patching and remediation with infrastructure and application teams. • Maintain baseline security configurations and ensure compliance with hardening standards. Data & Application Security (Infrastructure Perspective) • Support implementation of Microsoft DLP and Microsoft Purview (Data Classification) from an infrastructure integration standpoint. • Administer Web Application Firewall (F5 ASM) and support application security tools (Checkmarx, SecureEyes) in coordination with development teams. • Manage Database security controls (Imperva) to protect critical data assets • 5+ years of experience in network security, cybersecurity operations, or security administration roles. • Hands-on experience administering multiple security tools, including: • Firewalls: Cisco Firepower, Palo Alto • WAF/VPN/DNS: F5 (ASM, APM, GTM) • DDoS Protection: Arbor, Akamai • IAM/PAM: OneIdentity, Delinea, Azure MFA • Vulnerability Management: Qualys, Nessus • Endpoint & Email Security: Symantec, Microsoft Defender • Strong understanding of networking concepts (TCP/IP, DNS, VPN, routing, switching). • Experience with security integrations across SIEM, SOAR, IAM, and endpoint tools. • Familiarity with threat intelligence platforms and incident response processes. • Ability to manage complex multi-vendor environments and troubleshoot integrations. • Experience with scripting/automation (PowerShell, Python) is a plus. • Excellent analytical, problem-solving, and communication skills. • Perform end-to-end administration, configuration tuning, patching, and upgrades of security platforms.