Job description

Resource requirements and tasks to be performed: The ISD Security division is in need of a Senior Security Engineer to act as a bridge while we recruit for the vacant IS III full time position and to assist in getting caught up on numerous projects that have been delayed due to higher priority project constraints. This position will be on-site in Redwood City for at least three months of the engagement. Summary: The County is engaged in numerous projects across a wide variety of technologies primarily involving firewall support and configuration. High-level task lists may involve tunnel support/asset upgrades/OS upgrades/ remote access configuration/Panorama re-implementation/cloud integration. Additionally, the team is also engaged in day-to-day security alert response, vulnerability management tasks, AD/Forest management tasks and support. The County requires significant experience across many areas with primary knowledge and experience in the Palo Alto ecosystem or security platforms as well as Microsoft domain services. Example of knowledge and experience: • Senior level experience managing, designing, and supporting a security environment, typically 8-9+ years’ experience. • Knowledge of Project Management principles with a significant understanding of how to engage project sponsors, development of scoping documents for projects, ensuring that all tasks on any given project are understood, approved, and communicated. • Proven capabilities to act independently to achieve project goals and outcomes. • Subject matter expert in: • Project management principles with a significant understanding of how to engage project sponsors, development of scoping documents for projects, ensuring that all tasks on any given project are understood, approved, and communicated • Configuration of next generation firewalls (NGFW); rule management; access list generation; integration with AD • Palo Alto products: Firewalls, VPN, Prisma, XDR, XSOAR, XDR SIEM Threat Prevention, Wildfire sandboxing and IDPS • Tenable/Nessus – Vulnerability Management • Networking: IP Subnetting, DHCP, DNS, switching, routing • Configure domain and azure policies to enforce and control properties of resources and okta sso • Strong scripting experience, such as powershell, vbscript • Strong experience in packet analysis, tcpdump, wireshark • Experience in Solarwinds NMS and Solarwinds ARM • Experience on AWS/Azure cloud security platforms and services

Requirements