26961717 Perimeter Security Senior Engineer (Vice President)

At Citi, we get to connect millions of people across hundreds of cities and countries every day.  And we've been doing it for more than 200 years.  We do this through our unparalleled global network.  We provide a broad range of financial services and products to our clients – whether they be consumers, corporations, governments or institutions – to help them meet their biggest opportunities and face the world's toughest challenges.

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country
• We empower our employees to manage their financial well-being and help them plan for the future

The Perimeter Security Build Engineer will play a crucial role in developing and implementing perimeter security solutions for our organization. This role emphasizes the hands-on deployment, and configuration of security systems at the network's edge, focusing on protecting against external threats. The ideal candidate will possess a strong background in network security, with a particular emphasis on building and implementing robust security infrastructures.

Key Responsibilities:

Security Infrastructure Development:

• Design, build, and deploy perimeter security solutions, including firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and VPNs.

• Implement security measures that effectively safeguard the organization's network periphery.

• Ensure new security solutions are seamlessly integrated into the existing network architecture.

Network Routing and Configuration:

• Understand and manage network routing protocols and configurations.

• Ensure optimal network performance and security through effective routing strategies.

• Troubleshoot routing issues and optimize network routes for security and efficiency

Configuration and Implementation:

• Configure security infrastructure for optimal protection and performance.

• Collaborate with network architects and IT teams to ensure alignment of security measures with overall network strategy.

Documentation and Compliance:

• Document build processes, configurations, and standard operating procedures.

• Ensure compliance with relevant security policies and regulatory standards in all implementation tasks.

Collaboration and Communication:

• Work closely with various internal teams and security vendors to enhance perimeter security.

• Effectively communicate project statuses, challenges, and achievements to stakeholders.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.

• 4-6 years of experience in network security, with a focus on security infrastructure development and implementation.

• Strong familiarity with security technologies, including but not limited to Checkpoint, Palo Alto Networks, and Cisco.

• Knowledge of network protocols, routing, and firewall management.

• Basic Understanding of automation scripting languages such as Python or PowerShell or Ansible is desirable.

• Understanding of Cloud Security is an advantage.

• Relevant certifications are highly desirable, including CompTIA Security+, CCNA, Check Point Certified Admin (CCSA), Palo Alto Networks Certified Network Security Administrator (PCNSA).

Skills:

• Excellent technical skills with a strong focus on security infrastructure and problem-solving.

• Ability to manage multiple projects and tasks simultaneously.

• Strong communication and teamwork capabilities.

• Detail-oriented approach with a commitment to high-quality outcomes.

Work Environment:

• This role may require occasional after-hours work for important implementations or urgent problem resolutions.

• Hybrid-model work with office and remote days.

• Weekend work is periodically expected with adequate off-days provided.

Career Path:

Opportunities for advancement into senior engineering roles, security architecture, or specialized cybersecurity areas