Systems Engineer (Network Security)
San Jose, Ca, Us
- Design, implementation, and support of hardware/software infrastructure for Cisco's Advanced Threat Analytics division.- Deployments of massive-scale network security analytics solutions world-wide, and collaborating with resources in several countries such as UK, Spain, and Japan.- Hands-on experience with Cisco IDS/IPS solutions. SourceFire, Anue,SecurityOnion, Bro, Solera/Security Analytics Platform, SiLK, and other netflow/PCAP/metadata/security analytics solutions.- Bare-metal deployment of Cisco enterprise networking equipment, and other network/security related solutions. Emphasis on Nexus family of gear, plus some iOS routers. - Engineering custom automations for bare-metal deployments involving Cisco networking hardware, Cisco UCS hardware, and 3rd-party equipment. Focus on Cisco XML API, bash, TCL/expect, Zabbix, and other forms of automation tools. This also includes technologes for DHCP, PXE, and custom hardware provisioning.- Custom software/scripted/development solutions for various problems/efficiency enhancements at Cisco. Custom monitoring for various platforms, services, and hardware. - Heavy use of VMWare ESX, vCenter, and KVM/OpenStack virtualization technologies.- Support of Elasticsearch clusters, and the tools that feed in data, like Logstash or Flume. Kibana4 as the UI, as well as custom solutions written by Cisco. - VPN tunnel deployment, configuration, and troubleshooting.- Cisco UCS hardware deployment/configuration, and programming custom tools to automate those tasks.- CentOS, Ubuntu, and custom Linux OS deployments with a specific focus on security.- Environment infrastructure like Active Directory, LDAP, DNS, DHCP, and custom account creation for various internal products.- Administration of products like JIRA, HipChat, Confluence, Token WebADB, vCenter, VPD, Puppet, Ansible, configuring SNMP receivers and clients,