Network Protection Services Consultant

1-YEAR BASE TERM, WITH POTENTIAL 2-YEAR EXTENSION.  MUST BE ABLE TO WORK ONSITE IN RANCHO CORDOVA, SACRAMENTO, VACAVILLE, AND SAN JOSE, CA.

Mandatory Requirements

• Seven (7) years of experience with network protocols configuration and troubleshooting – including but not limited to: Ethernet, Virtual Local Network (VLAN), Layer Two Tunneling Protocol (L2TP), Continuous Data Protection (CDP), Multi-Protocol Label Switching (MPLS), Routing Information Protocol Version 2 (RIPv2), Border Gateway Protocol v4 (BGP), Internet Protocol v4, Internet Protocol v6, Internet Protocol Security, Secure File Transfer Protocol (SFTP), Transmission Control Protocol (TCP), Transport Layer Security, Network Time Protocol (NTP), Domain Name Systems (DNS).
• Seven (7) years of experience with network hardware and software configuration and troubleshooting – including Cisco, Juniper, Palo Alto, F5, Ciena (routers, switches, firewalls, load balancers).
• Seven (7) years of experience with VMWare NSX used in the data center context.
• Seven (7) years of experience with and knowledge of Security Appliances and features – Cisco Adaptive Security Appliance (ASA), Juniper Secure Routing and Switching Firewall (SRX), Palo Alto Firewall, F5.
• Seven (7) years of experience with Application Security Manager/Web Application Firewall (ASM/WAF), Trend TippingPoint, Distributed Denial of Service (DDoS) technologies and services.
• Seven (7) years of experience with and knowledge of Virtual Private Network (VPN) Technologies and Deployments – Internet Protocol Security (IPsec), Triple Data Encryption Algorithm (3DES), Advanced Encryption Standard (AES), Internet Key Exchange (IKE), Dynamic Multipoint Virtual Private Network (DMVPN), AnyConnect, Full Tunnel/Split Tunnel Client Virtual Private Network Solutions, Site to Site VPN Solutions and Software Defined Wide Area Network (SDWAN).
• TippingPoint Intrusion Protection System Expert Certification.

Desirable Qualifications

• Additional experience of mandatory qualifications with a minimum of five (5) years’ experience.
• Experience with Amazon Web Services (AWS), and/or Azure networking services.
• Experience with complex documentation of network designs, network modifications/changes, and troubleshooting process changes.
• Experience configuring and troubleshooting Intrusion Protection Systems/Intrusion Detection Systems (IPS/IDS).
• Experience in sniffer packet capture and protocol analysis.
• Scripting experience (i.e., Perl, Python, Java, PowerShell, etc.).
• Experience in analysis and design of network security alternatives.
• Experience using Security Information and Event Management (SIEM) tools.
• Familiarity with security controls as defined in the NIST 800-53 v4 publication.
• Experience in evaluation, deployment, and management of vendor managed services.

Applications that do not complete the Prescreen Survey will not be considered.

Anvaya Solutions, Inc. is an equal opportunity employer. All employment decisions, including hiring, promotions, and compensation, are made without regard to race, color, religion, sex, national origin, or any other protected characteristic.  We are committed to a merit-based workplace where every individual is treated with respect and has equal access to opportunities based solely on their qualifications and performance.