We are currently seeking a Network Security Engineer with a minimum of 3-5 years of hands-on experience. Manage our network segmentation and network visibility solution.

• Routing protocols EIGRP, OSPF, and BGP; configuring, troubleshooting, typical show commands to research issues
• Racking and stacking Cisco 2900, 3700, 3600, 3800, 4500, 6500 series switches
• Upgrading firmware on Cisco switches.
• Engage with Engineering, Medical, PCI Compliance and application development teams to determine segmentation requirements
• Engage with vendors to determine segmentation requirements for their products
• Troubleshooting of any issues that occur because of segmentation
• Broker after hours outage time with stakeholders for network segmentation changes
• Site surveys of systems/devices that will be segmented
• Handle escalated tickets regarding segmentation and network visibility
• Onsite support for afterhours segmentation changes
• Troubleshoot integration issues with other systems
• Troubleshoot communication issues between the overlay and underlay of our network segmentation solution
• Collaborate with rest of network department to ensure their systems remain stable as we add security measures
• Support Radiology doctors with their remote access devices. Configure new devices onsite for new doctors
• Participate in Change control process and peer reviews
• Tools for upgrading firmware on Cisco switches; TFTP and FTP server, thumb drive
• Configuration of Cisco switches in command line via console and SSH
• Working knowledge of Cisco Catalyst linecards; multi-gig copper and fiber cards, supervisors
• Deep understanding of Layer 1 concepts, configuration, and troubleshooting;
• Working knowledge of Power over Ethernet; verification of power being provided to devices, PoE power budget on a switch
• Deep understanding of Layer 2 concepts, configuration, and troubleshooting; spanning tree, root bridge, BPDU, designated ports, root ports, trunk and access ports, rapid spanning tree, ieee, MST, VLAN, Layer 2 extension, CDP, LLDP, MAC address, CAM and TCAM table, DHCP snooping
• Deep understanding of Layer 3 concepts, configuration, and troubleshooting;
• Deep understanding of Layer 4 concepts, configuration, and troubleshooting;
• Deep understanding of Layer 7 concepts, configuration, and troubleshooting;
• Deep understanding of first-hop redundancy protocols; HSRP, GLBP, VRRP
• Deep understanding of IPv4 addressing, variable length subnet masks, summarization
• Fiber plant management; installing fiber patch cords, troubleshooting link issues, working knowledge of multi-mode and single-mode fiber cabling
• Copper plant management; installing CAT5/5e/6 patch cords, 568A/B termination, knowledge of straight through, cross-over, rollover cabling, usage of a tone generator and tracing copper cabling from Location A to Location Z
• Working knowledge of Cisco fiber transceiver types; SFP, SFP28, QSFP; and wavelength types; 850nm, 1310nm, SX, LX, SR, LR, LR4, 1-gig, 10-gig, 25-gig, 100-gig

• 5+ years' experience in network engineering
• Bachelor's degree
• CCNA, A + and Network + certification is strongly recommended
• In-depth knowledge of Networking and Security
• Knowledge of Security best practices
• Experience working with Firewalls, Routers, Switches, Access points and Voice over IP phones
• Excellent communication skills will need to converse with various technical and non-technical teams
• Flexibility to work after hours on changes
• Experience with network segmentation and Zero-trust architecture is a plus
• Experience with a SASE solution is a plus
• Worked in a hospital setting before is a plus

Founded in 1998, Lincoln Computer Services is a growing custom IT solution provider, servicing New York City and Long Island, New York. If you are interested in working for a growth-oriented company with a culture that exudes collaboration, integrity and a passion for technology, submit your resume today!