Network & Security Senior Engineer I

ABOUT US:

We are Alter Domus. Meaning “The Other House” in Latin, Alter Domus is proud to be home to 85% of the top 30 asset managers in the alternatives industry, and more than 5,000 professionals across 23 countries. 

With a deep understanding of what it takes to succeed in alternatives, we believe in being different. Invest yourself in the alternative, and join an organization where you progress on merit, where you can speak openly with whoever you are speaking to, and where you will be supported along whichever path you choose to take. 

Find out more about life at Alter Domus at careers.alterdomus.com  

Reporting to the Global Head of Security, the Senior Network Security Engineer plays a crucial role in leading our Network Security program, ensuring the highest level of security for our organization.

The Senior Network Security Engineer will design, deploy, and manage network infrastructure, with an emphasis on firewall rules management, proxy, WAF deployments, along with ZTIA solutions. This role is also expected to collaborate with the Infrastructure Operations team to provide business-as-usual support on an ongoing basis.

The Senior Network Security Engineer’s main goal is to design, implement, and maintain security measures to protect the organization's network infrastructure. This role also includes monitoring network traffic for suspicious activity and setting security standards to ensure compliance with security policies and regulations.

Key Responsibilities:

• Network Security Design: Develop and implement security architectures and solutions to safeguard the organization's network.
• Monitoring and Analysis: Continuously monitor network traffic and security alerts to identify and respond to potential threats.
• Standards Development: Create and maintain security standards, procedures, and documentation to ensure compliance with company policy and regulations.
• Collaboration: Work closely with IT teams to integrate security measures into network infrastructure and applications.
• Research and Development: Stay updated on the latest security trends, threats, and technologies to enhance the organization's security posture.

Job description:

• Managing Zscaler configuration and undertake rules review to optimize rules being mindful of user experience (e.g., allow rulesets to be permissive enough, yet secure)
• Deploying a centralized Web Application Firewall solution across organization’s mission critical sites
• Support DNS CNAME changes for rollout
• Manage site SSL certificates
• Undertake Layer 3-4 WAF rules tuning and collaborate with AppSec team for Layer 7 rules tuning
• Securing network system by enforcing security policies, performing configuration review/audit, defining and monitoring access:
• Design and optimize firewall rule sets for improved security, performance, and compliance.
• Perform risk assessments and firewall audits to ensure adherence to network security best practices.
• Analyze technical issues and making recommendations for corrective action.

• Work with the Network Operations team to collaborate on the following:
• Maintaining data networks (Cisco, Dell), Wi-Fi networks (Cisco WLC), next generation firewalls (Check Point). 
• Infrastructure monitoring and proactive optimization to improve network reliability and performance.  
• Troubleshooting network incidents and problems. Maintaining SLAs by effectively prioritizing and managing issues. 
• Coordinating field engineers, vendors and third parties to facilitate and speed up problem resolution. 
• Day to day user access request review and implementation (Check Point, Zscaler). 
• Create and maintain detailed network documentation and diagrams.

Your profile: 

• Bachelor’s degree in computer science, Information Security, or related professional experience.

• 5+ years of hands-on experience as a Network Security Engineer
• Strong TCP/IP network and security fundamentals. CCNP certified or equivalent experience level.  Additional certifications such as Network+, Security+, and Cloud certifications are also desired.
• Cross platform knowledge and experience to design, configure and troubleshoot WAN/LAN/WLAN technologies in an enterprise environment. Knowledge of advanced services and protocols: high availability, load-balancing, BGP, MPLS, SD-WAN, VoIP. 
• Hands on experience in implementing and managing next generation firewalls. Ability to implement and troubleshoot Firewall policies and IPsec VPNs.
•  Experience with Cisco ISE, WLC. 
• Knowledge of proxy solutions/web filtering such as Zscaler, end-user VPN solutions. Strong preference to Check Point skills, certification is a plus.  
• Familiarity with Zero Trust architectures and SASE frameworks.
• Be familiar with Microsoft Windows Technologies, O365, virtualization technologies
• Being familiar with service ticket management and associated workflows.  
• Strong attention to detail and ability to stay always organized while working in a dynamic environment wearing both a Security and Operations Hat.

WHAT WE OFFER:

We are committed to supporting your development, advancing your career, and providing benefits that matter to you. 

Our industry-leading Alter Domus Academy offers six learning zones for every stage of your career, with resources tailored to your ambitions and resources from LinkedIn Learning. 

Our global benefits also include:

• Support for professional accreditations such as ACCA and study leave 
• Flexible arrangements, generous holidays, birthday leave
• Continuous mentoring along your career progression 
• Active sports, events and social committees across our offices 
• Support with mental, physical, emotional and financial support 24/7 from our Employee Assistance Program 
• The opportunity to invest in our growth and success through our Employee Share Plan 
• Plus additional local benefits depending on your location 

Equity in every sense of the word:

We are in the business of equity, in every sense of the word. For us, this means taking action to ensure every colleague has equal opportunity, valuing every voice and experience across our organisation, maintaining an inclusive culture where you can bring your whole self to work, and making Alter Domus a workplace where everyone feels they belong. 

We celebrate our differences, and understand that our success relies on diverse perspectives and experiences, working towards shared goals and a common purpose. Thanks to the work of our Group DE&I Committee and network of DE&I Champions, we empower all of our people to be truly invested in the alternative.  

We are committed to ensuring an inclusive recruiting and onboarding process. Please contact our hiring team if you require any accommodations to make our recruitment process more accessible for you. 

(Alter Domus Privacy notice can be reviewed via Alter Domus webpage: https://alterdomus.com/privacy-notice/)

#LI-HYBRID