PDA

View Full Version : Security Architecture Engineer Needed at Chase Paymentech in Salem NH



lpyhtila
2010-09-17, 09:26
Chase Paymentech, a business unit of JP Morgan Chase is seeking a Security Architecture Engineer with Checkpoint experience. Please see job description below. If you or anyone that you know would be interested in this opportunity, please contact Lisa Pyhtila at lisa.pyhtila@jpmchase.com.

The Network Security Engineer is responsible for the Chase Paymentech network security Infrastructure throughout the entire Enterprise. The Chase Paymentech infrastructure is designed to support a highly available, multi-layered, defense in-depth network security architecture with zero downtime in several critical network segment. The network security engineer is responsible for maintenance and administration on all network security devices and providing top tier support for all firewall, IPS, DNS and VPN technology issues. This position requires an individual with a strong networking and IT security knowledge in supporting a very resilient infrastructure and the preferred business partners on which our network security is built on. Expert experience with CheckPoint R65 and higher with expert knowledge in how TCP, IPSEC and PKI work is required. A strong working knowledge with CheckPoint IPS-1, CheckPoint Provider-1, Cisco IOS/NX-OS, F5, TopLayer, Infoblox, ArcSight, Tufin, BreakingPoint, RSA, Linux, WildPackets, TCP troubleshooting, Web Application firewalls and thorough understanding of application layer protocols is highly desired.

CheckPoint Experience
CheckPoint CCSE+, CCMA or
5-7 years Network Security work experience
CheckPoint Edge appliance configuration, troubleshooting
Star and Mesh domain and route based VPN
CheckPoint IPS-1 IPS/IDS management
CheckPoint Large Scale Management (SmartLSM or SmartProvisioning)
Checkpoint Provider-1 R65 and higher
CheckPoint VSX R65 and higher
CheckPoint Eventia Analyzer and Reporter
CheckPoint Remote Access (SecureClient, Connectra, SNX and Abra)
CheckPoint SecurePlatform (including SecureXL, ClusterXL and CoreXL)

TopLayer Networks
IPS5500E Series Platform
Experience with large clustered deployments
IPS Controller
IPS ruleset and signature configuration and administration

ArcSight
Strong understanding of Syslog and SNMP
Familiarity with SIEM concepts
Experiencing with minor Oracle and MySQL administration

F5 Networks Experience
F5 Application Security Module (ASM)
F5 Global Traffic Manager (GTM)
F5 iRules
F5 iSession
F5 Enterprise Manager
Version 9.x and above

InfoBlox
IPAM - IP address manager
GRID style large scale deployments
PortIQ - Switch port manager
Strong understanding of DNS and Bind

Hardware and Appliance platforms
IBM xSeries servers
HP DL/BL series servers
HP Blade chassis and switch module configurations
Fujitsu Blade chassis and switch module configurations
RAID Concepts, configurations and management
SAN/NAS concepts and functions
Diskless appliance management concepts and fundamentals


Application and Protocol Qualification:

Secure Transport Protocols
SSL, IPSEC, SSH

Secure Authorization Protocols
TACACS+, Radius, SecurID, MS-CHAP, NTLM, Kerberos, Certificate

Vulnerability Assessment tools and evasion techniques
Core Impact
Nessus
N-Map
Saint
Samari
BreakingPoint

Education

Bachelor Degree or equivalent Certification and experience.

eduardw
2010-09-17, 19:51
Are you looking for one person or a complete team. :)
I could not imagine that you could find one person who posses all those credential and if so it will cost you an arm and a leg (or at least $250k+)

Kind regards
Eduard

melipla
2010-09-17, 22:44
I could not imagine that you could find one person who posses all those credential

Hi, my name is..."let's talk about relocation" ;)

Routerkid1
2010-09-23, 18:35
Are you looking for one person or a complete team. :)
I could not imagine that you could find one person who posses all those credential and if so it will cost you an arm and a leg (or at least $250k+)

Kind regards
Eduard

I have all of those skills but not moving to NH