Network Security Specialist - MTBNY

Network Security Specialist 

Secure branch, data center, and cloud network planes that carry sensitive payment and core-banking traffic. Enforce microsegmentation, zero-trust, and east-west controls while maintaining ultra-low latency for real-time payments.

Key Responsibilities

• Engineer microsegmentation (NSX/ACI) for mainframe adjuncts, middleware (MQ), and app tiers; create deny-by-default policy baselines.
• Manage perimeter security (Next-Gen Firewalls, WAF, DDoS) and secure connectivity (MPLS/SD-WAN, IPsec/GRE, ExpressRoute) for branches and partners.
• Implement Zero Trust network access (ZTNA), mTLS, and certificate governance for internal APIs.
• Build use-case runbooks for BEC, DNS exfiltration, lateral movement; integrate with SOC for rapid containment.
• Validate controls against FFIEC CAT, NIST CSF, PCI; maintain audit artifacts and compensating controls.
• Optimize low-latency paths for RTP/wire corridors; enforce QoS where required.

Required Skills

• Cisco ASA/FTD, Palo Alto, F5, Zscaler; BGP/EVPN/VXLAN, NAC (802.1X).
• Network microsegmentation (NSX-T/Cisco ACI) and zero-trust
• Packet analysis (Wireshark), NetFlow, SPAN/ERSPAN for transaction tracing.
• Regulatory alignment experience (FFIEC/NIST/PCI).