Expert Cybersecurity IT Solutions Engineer

Company: PG&E Corporation
Location: Sacramento
Posted on: January 25, 2023

Job Description:

Requisition ID -# 135156 -Job Category: Information Technology -Job Level: Individual ContributorBusiness Unit: Information TechnologyJob Location: Sacramento; Auburn; Concord; OaklandDepartment Summary -Information Systems Technology Services is a unified organization comprised of various departments which collaborate effectively to deliver high quality technology solutions. -Position Summary -The Expert Cybersecurity IT Solutions Engineer is a highly organized, thorough, security-minded problem solver focused on the protection of PG&E information system assets against compromise and cyber-attacks. The successful candidate is responsible for planning, implementing, deploying, and maintenance of security solutions to ensure the stability and security of PG&E infrastructure for both on premise data centers and cloud deployments. They will have extensive knowledge and broad functional experience with Firewalls, AWS, ADC, IDS/IPS across a wide range of complex architectures, platforms, and mediums. The successful candidate will have extensive knowledge of Application Delivery Controller and Web Application Firewall technologies, as well as experience with integrating them with Single Sign On and other tools. This position will help in the secure deployment of network systems and help in the administration of same in a mission-critical, 24/7 environment. - -The successful candidate must be able to implement high-level designs, provide constructive feedback and input to architects and update operations documentation for any new configurations or procedures resulting from changes to production environments. They must also document all work for metrics and billing reporting using a designated change management or request system. They also participate in audits from outside vendors and government regulators (NERC, WECC, etc.).The position is hybrid, working primarily from your home office with in-person visits 1-2x monthly or as business needs require. The headquarter location is flexible and can be based out of Auburn/Sacramento/Concord/Oakland. -PG&E is providing the salary range that the company in good faith believes it might pay for this position at the time of the -job posting. This compensation range is specific to the locality of the job. The actual salary paid to an individual will be -based on multiple factors, including, but not limited to, specific skills, education, licenses or certifications, experience, -market value, geographic location, and internal equity. -This job is also eligible to participate in -PG&E's discretionary incentive compensation programs. - -A reasonable salary range is:--- -California Minimum: - - - - - $---112,000California Maximum: - - - - $---179,000 -Job Responsibilities -

• Accountable for creating comprehensive technology platform solution designs that meet PG&E business solution requirements on complex IT projects.
• Collaborating with stakeholders, leads the development of an implementation that utilizes the best of IT standards, service offerings and operational options to develop an implementation approach of technology solution alternatives.
• Will ensure that the physical design and configuration of the delivered solutions are in direct alignment with the logical design and is often lead/owner in the solution design stage (within their discipline).
• Leads by collaboration with other technical teams in the exchange and transfer of technical knowledge, and in the development and evolution of IT standards, guidelines, solutions, planning and implementation.
• Provides guidance and examples to other solution engineers for the documents and deliverables to assure consistency in the Project Delivery Methodology, and occasionally leads initiatives toward process and project delivery improvements.
• Delivers training and presentations from small to medium groups to improve skills of others and understanding across a medium span of influence.
• Leads others in the promotion, development and reuse of common solutions, components, and services
• Collaborate with and often leads other domain specific (application, infrastructure, or information) Engineers, Architects, Product Specialists, System Design Engineers, and technologists to complete IT deliverables.
• Work with other engineers, architects, and product specialists to ensure that the products and components work together to meet the objectives and performance goals as defined in the requirements.
• Serves as technical advocate and is the voice for IT operations on the implementation strategy designed to address client business problems.
• Responsible for the full lifecycle technical implementation, with SME participation in; solution evaluation and selection, buy vs. build decisions, business requirements impact analysis
• Generates or assists business in generation of Project Concept estimates and refinement of early-phase project estimates which contribute to the business case, and implementation level design.
• Provides critical support function for Solution Engineering design decisions during plan, analyze, design, build, test, and deploy phases of IT projects.
• Assignments are broad and complex, have major associated risks with high visibility, and can be sensitive or widely varied requiring expert judgment in applying and adapting techniques.
• The work product has potentially significant impact (financial, public perception, operational, legal) on the Company; incumbent and the team represent the company's interest in a project with clearly "high stakes" under general guidance. -Qualifications -Minimum:
  • BA or BS degree in Computer Science, Engineering, Business or related discipline or equivalent experience
  • 8 years of IT engineering design and/or technical implementation, network, or IT operations experience -Desired:
    • Experience with multi-tier enterprise technology environments
    • Experience directing staff across diverse IT disciplines
    • CISSP or other industry standard network security certification
    • Experience in the Utility Industry and meeting audit requirements for NERC and WECC
    • Experience with Application Delivery Controllers (preferably F5)
    • Experience with Web Application Firewalls
    • Experience with Palo Alto next generation firewalls
    • Experience with Cisco VSG or VMWare ESX firewalls
    • Experience with encryption protocols
    • Experience with VPN using IPSec or SSL VPN
    • Experience with firewall rule automation tools, such as Tufin
    • Experience with monitoring or syslog collection/analysis tools
    • Experience with Cloud-based solutions
    • Experience with IDS/IPS
    • Experience with Packet capture tools, including Wireshark and ANUE/IXIA
    • Experience or knowledge of DNS and DHCP
    • Experience with web, middleware, or database servers
    • Experience with Cyclades or other serial console terminal servers -Knowledge, Skills, and Abilities:
      • Demonstrated team player with strong and effective customer care skills
      • Experience building and maintaining complex network maps
      • Experience with developing scripts to automate infrastructure deployment and collect metrics
      • Experience with Automation software such as Ansible, Chef, Jenkins, and Puppet
      • Experience with various network security tools such as Infoblox (IPAM, DNS), Cisco ISE, PRTG, Netbrain, Tufin, Skybox and QRadar
      • Familiar with network monitoring tools such as NetMRI, Netflow, and provide metrics in this area
      • Experience with multi-vendor firewall technologies including Palo Alto Networks and Cisco
      • Experience with F5 Application Delivery Controllers
      • Experience in Network monitoring and troubleshooting techniques, including SNMP monitoring tools, packet sniffing, and protocol analysis.
      • Understanding of network security concepts, including segmentation and defense-in-depth strategies
      • Ability to create VLANs, routes and configure network interfaces on switches, routers, and firewalls to facilitate the building of DMZs and create network segmentation
      • Ability to troubleshoot and pinpoint network issues outside of firewalls
      • Understanding of network concepts from layer 2 through 7 including NAT/PAT and NGFW application identification
      • Ability to collaborate with Architects, Solutions Engineers, and Project Managers to meet aggressive project deadlines. -
      • Available for 24x7 on call rotation - - - -

Keywords: PG&E Corporation, Sacramento , Expert Cybersecurity IT Solutions Engineer, Engineering , Sacramento, California