Job Title: Cloud Infrastructure Security Engineer

Labor Category: Specialist 3

Location: 2 Metrotech, Brooklyn, NY

Job Type: Contract

Work schedule: Normal business hours Monday-Friday 35 hours/week (not including mandatory unpaid meal break after 6 hours of work).

Duration: 12 Months

Pay Rate: $90 - $100 per hour

Job Description / Justification:

We are looking for Security Engineer/Architect who will be required to assist with the design and deployment of firewall security solutions deployed in large, complex hybrid cloud environments. The architect/engineer must be highly specialized to provide guidance at various stages of planning and implementing secure design, processes, and resilient solutions. This resource will have significant interaction with Infrastructure Management leadership, its engineering and architecture teams, operations team, and datacenter teams.

SCOPE OF SERVICES:

Hybrid cloud firewalls and network – Next-Gen Firewall, Routing and Defensive Security, DNS, DDOS: design, implementation, configuration, optimization and troubleshooting.

TASKS:

1. Participate in design meetings and reviews from a security and network perspective on assigned priority projects.
2. Propose networking security architecture to meet the business requirements and while adhering to OTI’s best practices guidelines.
3. Collaborate with OTI’s Architect teams for developing operable solutions for Citywide requirements.
4. Complete all requirements for installing new network or firewall devices.
5. Follow OTI process for new devices provisioning of integrated systems.
6. Configure ports, configure firewalls, and apply the base templates configurations, integrate the appliances into production network.
7. Develop and validate base configurations for operational use.
8. Create and review method-of-procedure for the change to be executed during the approved change window.
9. Open TAC cases as needed and identify root causes.
10. Review and implement network optimizations, network resilience and network failover testing as directed.
11. Develop plan and strategy for complex network upgrades.
12. Complete any additional tasks assigned by the manager.

MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered.

• Minimum 12 years of experience in the field of networking, network security and firewalls
• Must have hands-on experience with Palo Alto, Checkpoint and Cisco firewalls.
• Deep understanding and experience of DNS, NTP, BGP and other critical infrastructure protocols.
• Must understand BGP, MPLS, OSPF, IS-IS routing protocols in a large environment.
• Deep understanding on routing, load balancing and networking infrastructure.
• Must have experience with designing, securing, and implementing on Azure, AWS, and GCP.

DESIRABLE SKILLS/EXPERIENCE:

• Hands on experience in Palo Alto firewall technology
• Additional experience in the field of load balancing.
• Good project management skills
• Ability to simultaneously work on multiple projects.

SPECIAL REQUIREMENTS: N/A

Posted On: Friday, June 20, 2025
Compensation: $90 t $100 Per hour