Security Engineer IV
Company Overview
Spectrum is the nation's fastest-growing mobile provider and leading internet provider. Our tech teams create, develop, and operate leading connectivity products serving nearly 100 million users and 500 million devices. We connect people to what's next.
The Charter Technical Engineering Center (CTEC) facilities in Englewood, CO oversees the design and architecture of Charter's multi-billion dollar network infrastructure. We investigate, select, develop, and integrate technologies and solutions that meet the needs of the company for short, medium and long term initiatives. This includes the delivery of the technology plan and future architecture for Voice, Video, Data, Optical, Commercial, Cloud, CPE, Network and Access.
This position is eligible to work in a hybrid work model (combination of in-office and remote days)
JOB SUMMARY
The Network Security Architecture team works closely with Charter's Architectural, Operational, and Industry groups, providing design standards centered on cybersecurity industry best practices for all technologies associated to Core, Edge, Access, and Data Center controls. More specific responsibilities include cybersecurity architecture research and development, proof of concept testing, and development of protection mechanisms for business critical services. We leverage modern security techniques to build innovative solutions in multiple arenas such as Automation/Orchestration, BGP Security, and Configuration Compliance. Solutions being developed by the Security Engineering team are critical to supporting major business initiatives within Charter, and are essential in securing our complex network. During the interview process, qualified candidates must demonstrate strong knowledge with Service Provider and Enterprise level network security topics as outlined in "Required Qualifications and Knowledge Base" below.
This position will report to the Director of Security Engineering and does not have any direct reports. The following duty statements are illustrative of the essential functions of the job and do not include other non-essential or marginal duties that may be required. The company reserves the right to modify or change the duties or essential functions of this job at any time.
MAJOR DUTIES AND RESPONSIBILITIES
Actively and consistently support all efforts to simplify and enhance the customer experience.• Architect, develop, and document industry best practices to support company initiatives while meeting performance and availability requirements• Review of design specification, lab testing, and company work group communication on all new and existing security related project controls• Audit of all existing security standards and controls: to include engineering designs, implementation guidelines, and field bulletins for equipment and technology upgrades on the Charter networks• Collaborate with Product, Operations and Engineering organizations to understand requirements and develop specifications around project initiatives• Operational incident and change management escalation support regarding production related concerns/issues around security related matters• Vulnerability remediation of lab owned devices and environments - ensuring all critical and high security vulnerabilities have been resolved and/or mitigated via proper security controls and/or the enabling or disabling of said vulnerable functions• Ensure proper Security Engineering to Security Operations handoff - capturing all required architectural documentation and security results accordingly• Adheres to industry specific local, state, and federal regulations, as applicable• Knows, understands and follows company policy• Performs other duties as requested by manager
REQUIRED QUALIFICATIONS
Required Skills/Abilities and Knowledge• Ability to read, write and speak the English language to communicate with employees, customers, suppliers, in person, on the phone, and by written communications in a clear, straight-forward, and professional manner• Advanced knowledge in network design/architecture, network layers 2/3/4/7, and protocols BGP/OSPF/MPLS• Advanced knowledge in test plan and certification processes• Advanced knowledge in Unix/Linux Environments such as Redhat, CentOS, and Kali• Advanced knowledge in security technologies such as IAM, PAM, WAF, FIM, FW, IDS IPS/ /DDoS• Strong knowledge in Scripting/Programming Automation with languages such as Python/Ansible/Bash/C• Familiar with Network Architectures such as NFV/VNF/SD-WAN• Familiar with Cloud and Container technologies such as AWS/Docker/Kubernetes/OpenShift• Advanced knowledge in using ticketing and software tools to support the current operations.• Advanced knowledge of network devices and basic network appliances• Advanced knowledge of network designing software, such as Visio• Ability to perform duties in a very fast pace environment and ability to learn new technology quickly• Ability to use personal computer and software applications
Required Education
Masters or Bachelor's Degree in Engineering or related field or related work experience
Preferred - Industry and vendor specific certifications and training preferred (Cisco, Juniper, Alcatel-Lucent, etc.)
Required Related Work Experience and Number of Years
Data network experience - 6+
PREFERRED QUALIFICATIONS
Preferred Skills/Abilities and Knowledge
Knowledge of company products and services
WORKING CONDITIONS
May work in Network Lab environment
Occasional travel as required
#LI-LYR ENE312 312123 312123BR
Here, employees don't just have jobs, they build careers. That's why we believe in offering a comprehensive pay and benefits package that rewards employees for their contributions to our success, supports all aspects of their well-being, and delivers real value at every stage of life.
The pay for this position has a salary range of $85,900.00 to $152,300.00. The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and location. Also, certain positions are eligible for additional forms of compensation such as bonuses.