Senior Network Security Engineer
Job Description
About the Metropolitan Museum of Art
The Met presents over 5,000 years of art from around the world for everyone to experience and enjoy. The Museum lives in two iconic sites in New York City—The Met Fifth Avenue and The Met Cloisters. Millions of people also take part in The Met experience online.
Since its founding in 1870, The Met has always aspired to be more than a treasury of rare and beautiful objects. We are committed to fostering a collaborative and respectful work environment with a staff as diverse as the audiences we engage. Our staff members are art lovers who are passionate about working toward a common goal: creating the most dynamic and inspiring art museum in the world.
At The Met, every staff member – from security officers to researchers to scientists and beyond – lives by our core values of respect, inclusivity, collaboration, excellence, and integrity.
Respect: Engage one another with collegiality, empathy, and kindness, always.
Inclusivity: Ensure that all are and feel welcome and valued.
Collaboration: Reach across boundaries to exchange ideas and work together toward our shared mission.
Excellence: Lead the cultural world in quality and expertise—and inspire curiosity and creativity.
Integrity: Hold ourselves to the highest moral standards, admit when we fall short, and then evolve.
COMPENSATION RANGE:
- Pay Range : $140,000 - $160,000 / Salary
- The advertised pay scale reflects the good faith minimum and maximum salary range for this role. The advertised pay scale is not a promise of a particular wage for any specific employee. The specific compensation offered to a candidate may be dependent on a variety of factors including, but not limited to, the candidate’s experience, education, special licensing or qualifications, and other factors.
Responsibilities
GENERAL STATEMENT OF RESPONSIBILITIES & DUTIES:
You ensure that existing network security systems stay secure and available to stakeholders. You will use your experience to cultivate and improve existing security measures and products as well as engineer new solutions. You work with the network architecture team and the security operations team to ensure that network and security policies and strategic goals are met. You participate in day-to-day operational network security tasks to ensure network system availability. You assist various stakeholders with operational troubleshooting
PRIMARY RESPONSIBILITIES & DUTIES:
- Support and monitor network security and remote access infrastructure performance and adjust as needed.
- Ensure that network security posture and designs follow vendor best practices as well as museum policies
- Design and Implement changes to work within established configuration and change management policies to ensure awareness, approval and success of changes made to critical network and security infrastructure
- Maintain system software packages and perform updates / hotfixes as needed to ensure our systems stay available and secure
- Provide Level 2 - 3 support and troubleshooting to resolve issues
- Maintain complete security documentation across all buildings and implementations
- Work with various technical and non-technical groups to develop solutions to support the Museum’s mission
- Participate in a weekly rotating on-call schedule to provide support off hours for critical business systems
- Implement all solutions to comply with the zero-trust model to ensure the highest level of security feasible for all Museum systems
- Work with application stakeholders to tune and manage our cloud WAF solution
- Implement advanced protection policies in our cloud WAF solution
Job Requirements
EDUCATION & EXPERIENCE:
- 5 years’ experience with the Palo Alto Networks, Network Security Ecosystem (Firewalls, Redundancy, VPNs, Global Protect, Cloud delivered security services), required
- 5 years’ experience with cloud IAAS network security solutions, required
- Palo Alto Networks Certifications or equivalent experience, required
- Knowledge of WAF / Cloud CDN services and application protection policies
- Knowledge of network operations automation tools and implementation models
- Knowledge of implementing zero-trust based security models via Palo Alto Networks Devices
- Knowledge of L2 and L3 technologies, Dynamic Routing Protocols and WAN access technologies
- Knowledge of certificate usage, distribution and implementation in authentication protocols and services
