SR. NETWORK/SECURITY ENGINEER

General Requirements: The Sr. Network / Security Engineer will be primarily focused on supporting AMGH’s Networking and Security needs throughout the sister companies of EagleMed, Air-Evac Lifeteam and Med-Trans Corporation.

The Sr. Network / Security Engineer is responsible for providing networking infrastructure support for all computing environments of the AMGH operating entities, and performing security assessment and analysis of all firewalls, routers, switches and wireless networking infrastructure. Other responsibilities will include:
• Design, purchase, install, and support network communications equipment, telephony infrastructure related to QoS and delivery of voice over IP, routing and switching Infrastructure, etc; this includes data on LAN/WAN enterprise-wide
• Plan and evaluate existing Network infrastructure and makes recommendations for future growth to maintain and/or expand service levels
• Provide highly-skilled technical guidance/input in Network and Security planning, engineering, and architecture
• Develop technical standards and interface applications, identify and evaluate new products, and provides resolution for network problems
• Troubleshoot complex problems where analysis of situation requires in-depth evaluation of various factors and data
• Provides guidance to other Network Administrators
• Interface with vendors, as needed, to identify, purchase and install new hardware and software
• At times will lead projects

Principal Responsibilities
• Design, configure, implement and support all firewalls, routers, switches, wireless access points and controllers
• Manage IP subnets
• Create/Maintain updated backups of all configurations for all networking equipment
• Perform network infrastructure installations, maintenance and upgrades
• Provide technical support to Information Technology staff, including problem analysis and troubleshooting and on-site support for all network and network security related issues
• Manage and maintain network equipment including replacement of retired equipment
• Develop documentation, Visio diagrams and design documents
• Support and manage wireless access points and controllers
• Work with other IT teams to develop and implement solutions
• Stay current with emerging technologies, and contribute to product evaluations/reviews
• Provide support to hardware, software or application deployment efforts
• Assist with system upgrades and moves with regard to networking and security
• Assist other AMGH IT resources with day-to-day operational support activities as required
• Provisioning of voice and data Telco circuits (T1, ISDN, Analog lines)
• Manage VPN Concentrators/Tunnels and RADIUS Servers
• Configure and manage firewalls for remote access such as client VPN
• Maintain heightened security awareness and take action for any potential issues as required for all LAN/WAN, data and voice Networks
• Manage Internet Domain Name and Certificates
• Maintain a Network monitoring and alerting system for all Network devices

Qualifications/Requirements
o College degree in a relevant technical area (Electrical Engineering, Information Systems, Computer Sciences, Computer Engineering) or equivalent experience
o Courses in networking and security
o In-depth knowledge of firewalls, routers and switches with a primary focus on Cisco
o In-depth knowledge of networking security principles including, but not limited, to Intrusion Detection Systems (IDS)
o Maintain professional awareness by reading/researching new technologies
o Experience with Cisco - 4500, 3700, 2500, ASA 2800, 2900, MDS 9124
o Experience with SonicWALL Pro 4050s

o Spanning-Tree, including 802.1d and 802.1w
o Trunking (Ether-channel)
o 802.1q vlan tagging
o Dark Fiber with short, long, and extended reach optics
o CWDM or DWDM gear with Dark Fiber
o 10 Gig Ethernet
o Strong troubleshooting skills and effective troubleshooting methods including:
o layer 1 (copper cabling troubles / fiber signal strength)
o layer 2 (spanning tree, vlan tagging, mac address tracing)
o layer 3 (routing troubles, EGP versus IGP redistribution, BGP attribute studying, prefix length issues)
o layer 4 (firewall troubles),
o layer 5 thru 7 (assisting with identifying application issues masquerading as network troubles)
o MPLS Experience a plus
• Layer 3 Experience
o OSPF Routing including route redistribution
o BGP
o Multihoming
o Load balancing traffic and engineering for automatic failover
o Multiple methods for equal-cost load balancing
o Routing policy to manipulate BGP attributes to hit 95% billing
o Isolation of routing policies between multiple datacenters including community attribute schemes
o Route reflectors and Confederations
o Flow analysis experience a plus

o Must be able to meet travel requirements of up to 65%

To apply send resume to: cooljobs@med-trans.net