SUMMARY As a Sr. Network & Security Engineer working on the Global IT Team, you will be tasked with managing and securing the Blaize network. Utilizing the depth and breadth of your hands-on knowledge and experience across both domains, you will quickly become the go-to person for network and security needs. In this role, you will be instrumental in designing and delivering the future of our technology roadmap, in migrating to any new designs, and in keeping our teams, data, and systems secure. You will implement best-practices and document the design and status of network and systems.
We are seeking an individual with exceptional technical and communication skills. Your primary responsibilities will include the design and delivery of high-performing, secure networks and the evaluation, adoption and deployment of the tools and systems to maintain security across the company. 

RESPONSIBILITIES 

• Develop and implement standards-based network designs for company’s office and backbone infrastructure.
• Actively test and confirm the security of our systems and data.
• Drive an embedded and pervasive security model into all aspects of our infrastructure, site, and backbone interconnectivity. Implement protections, test for vulnerabilities, monitor for security breaches and investigation/remediation of any security breaches.
• Evaluate new products, features and technologies which improve service availability and reduce costs, while providing comprehensive analysis and detailed implementation recommendations.
• Delivery of robust and comprehensive documentation, incorporating best practices which address disaster recovery, architecture, topology, support models, maintenance, troubleshooting runbooks, deployment cookbooks, disaster recovery, technotes, testing, etc.
• Automation - Drive simple and scalable approach to new technology solutions using automation to enable the organization to easily deploy and operate new features, capabilities, and functionality.
• Prepare for, manage, and lead the execution of various audits of company’s tech stack and security profile.
• Coach, mentor, and motivate junior team members and contractors, providing positive career and personal growth.

TYPICAL ACTIVITIES:

• Security Expert – Site-to-Site VPNs, Firewalls (Fortinet experience preferred), Okta, Radius, Kerberos, etc.
• Networking Expert – High-performance LAN, VLANs, Wi-Fi, SD-WAN, routing, and ISPs.
• Planning – Architecture planning, change management, disaster readiness, roadmap development and management, capacity planning and designing future services.

EDUCATION AND EXPERIENCE

• BS in a technical field or equivalent work experience.
• Significant hands-on Fortinet experience.
• Experience developing information security plans & policies.
• In-depth experience and understanding of WAN, ISP peering, BGP, OSPF, QoS, IP Addressing, DNS/DHCP, firewalls, wireless and L2 switching.
• Experience with data and network security, authentication, and identity access management.
• Must have design and deployment experience with Fortinet and/or Cisco routing and switch products, wireless and VPNs.
• Strong understanding of endpoint security solutions to include File Integrity Monitoring and Data Loss Prevention.
• Strong Technical Leadership, teamwork, collaboration, and communication skills.
• Experience designing secure networks, systems, and application architectures.
• Knowledge of disaster recovery, computer forensic tools, technologies, and methods.
• Experience planning, researching, and developing security policies, standards, and procedures.
• Experience in audit process management.
• Comfortable working in a dynamic start-up company environment.