Senior Staff Engineer - Firewall
The Sr. Network Engineer is responsible for managing, designing, and improving Comerica’s enterprise Checkpoint firewall infrastructure. They will assist network architects with design and implementation of network technologies. This role is responsible for providing guiding principles and leadership to engineering teams as well as offering proactive assistance on project-based activities. General duties include leading buildout of solutions and driving innovation for incorporating new modern technologies in the enterprise network. Partners with management and other engineers to drive infrastructure modernization projects to completion and provides Level3 technical support using extensive technical background to take on work assignments the team is engaged in. Strong people skills and the ability to balance/prioritize between multiple tasks and projects is essential.
The ideal candidate would have experience in network design, implementation, and documentation of medium-large scale enterprise networks, be familiar with datacenter and cloud-based Checkpoint firewall technologies (Checkpoint Gaia, VPN, CloudGuard. Maestro and VSX experience is a big plus), and have experience with the eBGP routing protocol on the Checkpoint platform. The senior engineer would also ideally work with F5 Load balancer clusters (Load balancing, SSL decryption policies, and DNS/GSLB) as well as Infoblox DNS/IPAM functions. Cloud networking experience is also desirable (AWS, Azure, GCP) with existing familiarity with on-prem to cloud connectivity solutions (eBGP peering, Cloud Exchange, etc.). SolarWinds, LiveAction or LibreNMS monitoring is also desirable.
The Sr Staff Engineer is expected to work collaboratively across a variety of business units to implement new technologies, coordinate and take lead of assigned projects in all technical and communication aspects, Lead engineering peers towards achieving common goals in assigned projects, and coach peer engineers and effectively perform knowledge transfer/cross-training activities. The ability to take ownership of a project and execute it from 0 to 100% with minimal supervision, while interacting with multiple departments/teams that may hold certain keys to project completion is critical to achieving success in this role.
Position Responsibilities:
Design & Methodology
- Work closely with business units, application teams, infrastructure areas and vendors to identity, review and evaluate the solution requirements.
- Investigate and propose strategic fits for virtualization, consolidation and rationalization solution opportunities within the
- infrastructure or business. Propose changes to the technical design solutions as applicable.
- Evaluate and align strategic fit solutions across platforms and solutions specific to system hardware and software technologies.
- Understand, participate, review and influence long term capacity planning and technology investments.
Technical Consulting
- Provide client consulting and planning guidance as applicable for moderate to complex projects.
- Provide consultation and works closely with other functional infrastructure areas/departments on multiple initiatives to meet common organizational/business goals and objectives.
- Participate in and provides consulting to project teams on architectural, design development, integration opportunities, planning of complex systems.
Planning & Organizing
- Map requirements into standard services solution, identity opportunities for integrating to existing or reuse technology and provide cost effective solutions for moderate to large highly complex project/programs/initiatives.
- Review, identify and manage requirements for moderate to complex solutions and do a cost value, feasibility and risk analysis.
Risk Management
- Review, participate, develop and update architectural standards, guiding principles, rationales and strategies.
- Evaluate, review and approve highly complex design solutions for business and Infrastructure project or programs or initiatives.
Administration
- Keep management informed of status of on activities through accurate, timely, and appropriate reporting.
- Actively participate in committees representing the department and/or planning unit.
Position Qualifications:
- Bachelor's Degree from an accredited university in Computer Science, Engineering or in a Technology related field, OR equivalent through a combination of education and/or technology experience, OR 12 years of technology experience
- 6 years of experience in identifying technical solutions for complex business problems, identifying the benefits and risks of the solutions and providing recommendations
- 5 years of experience in Technology
- 5 years of experience in implementing, upgrading, and maintaining Checkpoint firewalls including Site-to-Site VPN, and CloudGuard.
- This position is not eligible for sponsorship. Must have indefinite employment authorization.
Category C - Days in the office will either be designated days or will vary week to week from 2-5 days
8:00am - 5:00pm Monday - Friday
To Be Determined Based on Individual Experience