Senior Network Engineer (CCIE) - Temp
China Merchants Bank New York Branch · New York, NY, US
Apply directly on China Merchants Bank New York Branch’s careers site — no account needed.
About the role
I. Primary Responsibilities
This is a hands-on CCIE-level role requiring expert experience in enterprise network architecture, implementation, troubleshooting, optimization, and security.
Lead and execute the following key projects and responsibilities:
1. Design and implement the migration from the existing Cisco firewall environment to the new Sophos firewall platform, including firewall policies, NAT, routing, VPN, IPS, network segmentation, testing, rollback planning, and documentation.
2. Design and implement a secure WAF and SSL offloading solution for Internet-facing applications, including DMZ architecture, certificate management, traffic flows, high availability, security policies, and integration with the edge firewall.
3. Assess and enhance the existing Cisco ISE deployment, expanding its use beyond MAB through improved endpoint profiling, 802.1X authentication, authorization policies, posture assessment, network segmentation, logging, and operational monitoring.
4. Evaluate, select, and support the implementation of a new enterprise MFA solution, including requirements analysis, product comparison, architecture design, integration with Active Directory, VPN, network devices, and critical applications, testing, rollout planning, and documentation.
5. Assess and improve the existing SolarWinds Orion NPM deployment, including device coverage, alerting, performance thresholds, network visibility, capacity monitoring, reporting, and integration with operational and security processes.
6. Review and improve the enterprise network architecture across multiple sites, ensuring security-by-design, network segmentation, high availability, redundancy, fault tolerance, and operational resiliency.
7. Apply security-hardening standards and secure configuration baselines to firewalls, routers, switches, VPN systems, and network-management platforms.
8. Review and optimize firewall ACLs, NAT rules, network objects, and security policies by identifying and removing overly permissive, unused, duplicate, obsolete, and shadowed rules.
9. Evaluate and introduce new products and technologies to strengthen network infrastructure, security or improve productivity.
10. Collaborate with the existing Network Administrator and provide technical guidance, documentation, and knowledge transfer for all implemented solutions.
II. Qualifications Required
1. Active CCIE Enterprise Infrastructure or CCIE Security certification is required.
2. 8 years of hands-on enterprise network engineering and architecture experience in complex, multi-site environments.
3. Experience working in banking, financial services, or another regulated environment is strongly preferred.
4. Ability to perform occasional off-hours and weekend work as required.
5. Candidate with bilingual (English and Chinese) skills is required.
Pay: $80.00 - $120.00 per hour
Work Location: In person
Description sourced from the public Indeed listing — this role isn't indexed from the company's career page yet.
Never be applicant #200 again
Every job here is indexed straight from company career pages — often hours after it opens, before it reaches the big boards. Create a free account and get your best matches in a twice-daily digest.
- Your best matches, twice a day
- No duplicates, no ghost jobs, no recruiter spam
- Every job free to browse — pay only when you apply
Free account — no card required
93 150 live jobs · 17 788 companies tracked · 5 740 added today