Information Security Engineer

Starr Insurance Companies is a leading insurance and investment organization, providing commercial property and casualty insurance, including travel and accident coverage, to almost every imaginable business and industry in virtually every part of the world.

Cornelius Vander Starr established his first insurance company in Shanghai, China in 1919. Today, we are one of the world’s fastest growing insurance organizations, capable of writing in 128 countries on 6 continents.

Information Security – Firewall & Network Engineer

Starr’s Information Security Team is seeking a qualified and experienced candidate to fill the newly created role of Firewall and Network Security Engineer.  The Engineer will be responsible for the design, implementation, maintenance, and support of the organization's firewall infrastructure, primarily focusing on Palo Alto Networks technologies. The engineer will ensure the security and integrity of the company's networks and will work closely with the IT security team to develop comprehensive network security measures.

Specific Skills

• Experience installing, configuring, maintaining Palo Alto firewalls and technologies, (Panorama, Prisma Access, GlobalProtect)
• Experience designing effective, scalable, redundant, and secure networks and systems.
• Experience with DMZ perimeter, internal network segmentation, and remote (VPN) access security solutions.
• Develop and manage firewall policies and rulesets to ensure the protection of the network against threats while maintaining necessary business functionality.
• Perform regular firewall audits, reviews, and cleanups to maintain an optimized and compliant security posture.
• Experience with packet capture and analysis tools, demonstrated ability to perform problem analysis, root cause and troubleshooting network issues.
• Stay abreast of emerging security threats and vulnerabilities and recommend appropriate countermeasures and enhancements to the firewall infrastructure.
• Document network security architecture, policies, and procedures to support ongoing operations and compliance efforts.
• In-depth knowledge of Palo Alto Networks' security platform, including Next-Generation Firewalls, App-ID, SSL Decryption, Threat Prevention, and URL Filtering.
• Expertise in security protocols, intrusion detection/prevention systems (IDS/IPS), and Secure Sockets Layer (SSL/TLS) inspection.
• Experience with network protocols and concepts such as TCP/IP, VPN, NAT, and routing.

Related and Desired Skills and Work experience:

• Minimum of 3 years of experience in network security, with a focus on firewall technologies and specifically Palo Alto Networks products.
• Experience working with hybrid network environments, on prem and cloud-based network topologies.  Large international multi-site and remote B2B or end user VPNs environment.
• Strong understanding of network protocols and security concepts, including TCP/IP, VPN, NAT, routing, IDS/IPS, and SSL/TLS inspection.
• Experience of PKI, configuration of certification deployments in support of VPN and Authentication, life cycle certification management
• Excellent communication and documentation skills
• Project management skills, able to plan, implement and support complex deployments while ensuring uptime/SLA’s.
• Collaborating with security teams to integrate the firewall infrastructure with other security tools and platforms for a cohesive security posture.
• Knowledge of vulnerability management and the ability to interpret penetration test reports for effective risk mitigation.
• PCNSA, PCNSE, CCNA, CCNP Security or SANS Security Certifications

#LI-EP1

Starr is an equal opportunity employer, which means we'll consider all suitably qualified applicants regardless of gender identity or expression, ethnic origin, nationality, religion or beliefs, age, sexual orientation, disability status or any other protected characteristic. We recruit and develop our people based on merit and we're committed to creating an inclusive environment for all employees. We offer first class training and development opportunities to all employees. Our aim is to grow our own talent and bring out the best in people.