Network Gateway Engineer (PROJ-4817)
Job Description
Remote is seeking a Network Gateway Engineer to join the team in ASD. The Gateway Engineer is responsible for maintaining and supporting network gateway components that underpin secure and reliable organisational operations. This role ensures that network architectures are implemented according to defined standards, contributes to the development of recovery and contingency strategies, and plays a critical part in safeguarding the organisation’s network environment through incident investigation and application of security controls. The Gateway Engineer will work closely with ICT teams in the provision of technical expertise in the sustainment and maintenance of a robust gateway infrastructure capability. (LH-07707)
Role Description
Key duties and responsibilities
-
Maintain and support specific network components using agreed architectures, design standards, patterns and methodology.
-
Translates logical designs into physical designs that meet specified operational parameters for capacity and performance.
-
Assist in the development and implementation of strategies, operational policy and procedures and change initiatives.
-
Provide detailed, specialist technical advice, including strategic advice to the senior executive.
-
Contributes to the development of recovery routines and contingency procedures. Contributes to alternative network architectures, networking topologies and design options.
-
Identifies risks that arise from potential technical solution architectures. Designs alternate solutions or countermeasures and ensures they manage identified risks.
-
Investigates suspected attacks and supports security incident management.
-
Provides guidance on the application and operation of elementary physical, procedural and technical security controls.
Essential criteria
-
Demonstrated experience in the design and deployment of network infrastructure including Cisco Data centre technologies like Cisco Application Centric Infrastructure (ACI), Cisco Routers, Nexus switches, routing protocols like Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP).
-
Demonstrated experience with and/or detailed understanding of Palo Alto firewalls and IPS Solutions.
-
Technical proficiency in the design of services utilising F5/Blue Coat/ Citrix NetScaler/ Broadcom SWG Layer 4-7 switching/load balancing and proxy systems.
-
Demonstrated experience in the design and implementation of virtual private network (VPN) technologies, email and DNS (Infoblox) Solutions.
-
Demonstrated experience in the design and integration of hybrid and public cloud services.
Desirable criteria
-
Demonstrated experience with or knowledge of Australian Government information security policies, the ASD Information Security Manual and Essential Eight.