Infrastructure Security L3 Engineer at InfoVision

Job Title: Infrastructure Security L3 Engineer
Location: Onsite

Experience: 5+ Years
Job Overview:

The Infrastructure Security L3 Engineer will be responsible for maintaining and securing the organization's infrastructure at an advanced level. This role requires expertise in network security, multifactor authentication (MFA), firewall management, and Single Sign-On (SSO) technologies. The successful candidate will provide high-level support for security initiatives, perform regular backups, monitoring, and ensure best practices are followed in maintaining secure infrastructure.

Key Responsibilities:

• SAML / SSO (Single Sign-On):
  • Implement and manage SAML-based authentication systems to support SSO across various applications.
  • Ensure secure and seamless access to applications and systems using identity providers.
• DUO Security & MFA:
  • Configure and manage DUO Security solutions, implementing robust multi-factor authentication (MFA) across the organization.
  • Troubleshoot MFA-related issues and ensure compliance with security policies.
• Firewall (FW) Management:
  • Administer, configure, and monitor firewall rules and policies to ensure the security of network traffic.
  • Analyze firewall logs, mitigate threats, and maintain an optimal firewall performance level.
• Antivirus (AV) Management:
  • Manage and monitor antivirus (AV) software to protect infrastructure from viruses, malware, and other security threats.
  • Ensure AV solutions are up-to-date and functioning effectively across all devices.
• DNS Security:
  • Implement and manage DNS security solutions, preventing DNS-based attacks and ensuring domain name resolution integrity.
  • Monitor DNS traffic for potential threats and anomalies.
• NinjaOne (RMM) Management:
  • Utilize NinjaOne Remote Monitoring and Management (RMM) tool to monitor, manage, and maintain endpoint security across the network.
  • Respond to alerts and proactively identify areas of concern within the infrastructure.
• Network Storage Management:
  • Manage and secure network-attached storage (NAS) and other storage solutions to ensure data integrity and availability.
  • Implement backup and disaster recovery strategies for network storage systems.
• Network Monitoring:
  • Oversee network monitoring tools, analyzing real-time data to detect potential threats, bottlenecks, or performance issues.
  • Ensure high availability and security of the network by implementing monitoring best practices.
• Database Backup and Restore Testing:
  • Perform regular backups of databases and conduct restoration testing to ensure data can be recovered effectively in the event of a disaster or failure.
  • Ensure compliance with data retention policies and storage best practices.
• Documentation:
  • Create and maintain detailed documentation for infrastructure, including security configurations, network architecture, and backup procedures.
  • Ensure that documentation is up-to-date and easily accessible for future reference.

Skills & Qualifications:

• Certifications:
  • CCNP (Cisco Certified Network Professional) certification required.
  • Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Cisco Security certifications are preferred.
• SAML/SSO Expertise:
  • Strong understanding of SAML, identity providers, and the integration of SSO solutions across diverse platforms.
• Security Technologies:
  • Hands-on experience with DUO Security, firewalls (FW), antivirus (AV) management, and DNS security.
  • Familiarity with multi-factor authentication (MFA) technologies and practices.
• NinjaOne RMM:
  • Proficiency with NinjaOne or similar remote monitoring and management (RMM) tools for monitoring and securing endpoints.
• Network & Storage Management:
  • Advanced knowledge of network storage solutions and best practices for data management and backup.
  • Experience managing and securing network infrastructure, including switches, routers, and NAS.
• Backup & Restore Procedures:
  • Experience performing database backups, restoration testing, and ensuring data recovery processes are functional and reliable.
• Network Monitoring:
  • In-depth experience with network monitoring tools to detect and resolve security or performance issues.

Preferred Qualifications:

• CCNP Security or other advanced networking security certifications.
• Familiarity with ITIL-based processes for incident and change management.
• Experience with cloud-based security solutions and hybrid network environments.

Soft Skills:

• Strong analytical and problem-solving skills with a focus on security and operational efficiency.
• Excellent communication skills, both verbal and written, with the ability to explain complex security concepts.
• Ability to work independently and as part of a cross-functional team.