Über
As a Telecom Network Security Architect, you will be responsible for securing, managing, and maintaining Cisco routers, switches, and related network security technologies across the telecommunications enterprise environment. This role ensures confidentiality, integrity, and availability of critical network systems by implementing hardened configurations. You will monitor multiple sources for threats to provide guidance to teams remediating vulnerabilities and support secure network operations. This position requires working with many teams inside Duke Energy and vendors to ensure security is a top priority. Responsibilities:
Network Security & Configuration Management
Provide configuration guidance to ensure Telecom managed devices are following compliance, security baselines and industry's best practices. Provide firmware for patching and configuration hardening to mitigate known vulnerabilities. Provide security baseline to secure network architectures, including VLANs, ACLs, 802.1X, and secure management practices. A solid understanding of CVSS scoring and ratings to perform risk analysis and guidance. Threat & Vulnerability Management
Perform vulnerability assessments against Cisco devices using internal tools and vendor advisories. Analyze CVEs, evaluate exposure, and develop mitigation strategies. Track and report on vulnerability status and remediation timelines. Monitoring & Incident Response
Monitor for malicious or anomalous network activity involving Cisco infrastructure. Respond to alerts, investigate threats, and coordinate remediation. Document analysis and recommended actions. Process Improvement & Documentation
Develop and update operational procedures for secure Cisco device management. Maintain technical documentation and network diagrams. Compliance & Governance
Use tools to perform routine compliance checks to ensure devices meet internal controls. Assist with audits, regulatory reviews, and reporting. Lead ISE Architecture
A solid understanding of Cisco Identity Services Engine including services it provides, 802.1x, AAA, Network Access Control, and VPN. Lead a team of operations and engineers to support ISE, including best practices, updates, and policies to support the Enterprise. A solid understanding network protocols and how they work or could be manipulated to put the Duke Energy network at risk. Qualifications:
Required/Basic Qualifications
Bachelor's degree in Computer Science, Engineering, or related field Minimum 3 years of experience in network or security architecture Strong understanding of networking concepts and technologies Desired Qualifications
Industry certifications CISSP or CCNA Familiarity with cloud technologies, AI, and Enterprise Networks Strong problem-solving and analytical skills Specific Requirements
Proficiency in developing and maintaining network documentation and standards Ability to work effectively in cross-functional teams and communicate complex technical concepts to both technical and non-technical audiences Experience in project management and ability to lead technical initiatives Working Conditions
Hybrid work environment with a combination of remote and on-site work (3 days a week in the office) May require occasional travel to Duke Energy's service regions Potential for on-call duties and non-standard working hours during critical projects or incidents Travel Requirements
5-15% Relocation Assistance
Relocation Assistance Provided (as applicable)
#J-18808-Ljbffr
Sprachkenntnisse
- English
Hinweis für Nutzer
Dieses Stellenangebot stammt von einer Partnerplattform von TieTalent. Klick auf „Jetzt Bewerben”, um deine Bewerbung direkt auf deren Website einzureichen.