NJM Insurance Group has a full-time position available for a Network Security Engineer, Principal within the IT department. The Security Engineer will serve as a member of a team that is responsible for the design, implementation, optimization, and support of enterprise network security infrastructure, cloud and endpoint security solutions. A hybrid work schedule is available depending upon level of experience and time within the position.

Job Responsibilities:

• Research, architect, implement and monitor security solutions including networks, servers, endpoints and storage across a wide variety of systems and data types
• Daily operations to ensure endpoint security solutions are deployed appropriately and configured as desired. Interfacing with third party managed services team to triage events and act upon endpoint security alerts.
• Identify, define and document security controls. Transform information security recommendations into actionable IT security programs and solutions
• Prepare, document and maintain operating procedures, incident response procedures, security standards and troubleshooting guides. Create detailed documentation of existing security solutions
• Perform self-assessments of existing security systems to identify vulnerabilities, design weaknesses and recommend technologies and/or solutions to address the gaps
• Determine and implement industry and security best practices by performing independent research and attending training when required. Develop and maintain infrastructure security roadmap
• Triage and troubleshoot security related events to determine appropriate incident response and/or root cause
• Work with audit department to provide requested information and evidence. Understand, address and close findings in a complete and timely fashion.
• Act as the subject matter expert for multiple security product suites including firewalls, proxy servers, endpoint protection, IPS, email security, log management, content filtering, etc.
• Design and implement various encryption technologies including SSL/TLS, S/MIME, IPsec, Site to Site VPNs and data at rest encryption.
• Architect, implement and support internal and external PKI environments.
• Determine appropriate security controls for various cloud computing environments, with the ability to implement and operationalize them.

Required Skills & Qualifications:

• Excellent verbal, written and technical skills. Able to take highly technical information and present it to varied audiences in a manner easily understood.
• Hands on experience designing, implementing, operating and troubleshooting complex IT security solutions in a dynamic work environment.
• Able to work independently, as well as with a team, and is able to transform high level requirements into well thought out, well documented, secure solutions.
• 8-10 years of progressive work experience as an IT/cyber systems/security engineer. Experience with managing a team of direct reports is desired.
• Experience managing enterprise endpoint protection technologies such as Symantec, McAfee and/or Crowdstrike.
• Experience designing, implementing, and supporting security gateway solutions including Firewalls, IDS/IPS and VPNs from Checkpoint, Cisco and/or Palo Alto.
• Experience architecting, implementing and supporting Internet proxy server and web filtering solutions such as Zscaler, Forcepoint and McAfee.
• Experience with email hygiene and anti-spam solutions including Mimecast, Proofpoint and Symantec Mail Security.
• Experience creating and maintaining site to site and client VPN solutions utilizing Checkpoint, AWS and Cisco technologies.
• Experience with data encryption technologies and digital certificate management.
• Experience with back-office products such as Windows, Linux, DHCP, DNS, Active Directory, RADIUS, IIS, Exchange, SQL Server, VMware ESX and Windows networking.
• Experience with load balancing technologies such as F5, Netscaler and AWS ELB.
• Experience with Web Application Firewalls (WAF) such as F5, Silverline, Imperva and AWS WAF.
• Experience with provisioning and managing networking and security controls within public cloud providers such as AWS or Azure.
• Experience partnering with third-party Managed Security Service Providers and Information Security providers.

Legal Disclaimer: NJM is proud to be an equal opportunity employer. We are committed to attracting, retaining and promoting a diverse and inclusive workforce that is fully representative of the diversity that exists in the communities in which we do business.