Network Security Architect

Our plans for tomorrow are as bold as yours. Schering-Plough has new drugs on the horizon, new partnerships and a renewed dedication to leadership, values and hard work - the same qualities that made us an industry leader for decades. Each day, we grow our relationships and establish the trust of doctors and patients alike, while providing them with a steady flow of the most innovative and effective science-based medicines and services.



As we strive to achieve these goals, our commitment to building a diverse, global, highly skilled workforce has become even stronger, with performance driven incentives, leading edge training and development, and excellent opportunities for professional advancement. We are building a new and special kind of healthcare company. The change, the excitement, the opportunity are infectious.




Network Security Architect

Requisition Number: 15066BR



This position plays a key role in developing and supporting the S-P global network perimeter security strategy and architecture. It provides network perimeter security architecture, design, engineering and 3rd level troubleshooting expertise in support of the global network infrastructure. This role also involves working closely with peers in other disciplines to develop and troubleshoot complex integrated solutions.



Responsibilities:


Develop and implement high level technical strategies, detailed designs and integrated solutions as well as hands-on third level troubleshooting of complex problems across all layers of the OSI model.
Function as a liaison and subject mater expert in the area of network security and remote access to collaborate with engineers from other GIT functions on solution development.
Develop, present and drive the implementation of internal and cross-functional integrated network security solutions.
Effectively utilize superior analytical ability, communication skills and strong judgment both independently as well as in a cross-functional, multi-disciplinary, team environment.
Act as the technical lead on complex projects to ensure end-to-end analysis, integration and solution development.
Evaluate, understand and provide recommendations for new technologies as well as stay current with new functionality and features for existing technologies.
Mentoring and 3rd level troubleshooting assistance for Network Control Center analysts.

Qualifications
A Bachelor's Degree or comparable experience.
7-10 years of technical experience in security aspects of multi-platform systems design, operating systems, software, communications and network protocols.
Comprehensive experience in DMZ and perimeter network design including knowledge of redundant, secure global Internet connectivity in an enterprise environment.
Extensive experience in developing solutions and implementing secure client and third party business to business connectivity using Cisco's VPN 3030 gateway.
Advanced Checkpoint firewall on Nokia administration and configuration skills.
Thorough working knowledge of RSA SecurID implementation and administration.
Strong understanding of Internet DNS operation.
Significant experience with Cisco's CSS server load balancer.
Ability to diagnose complex application performance issues involving all relevant technologies listed above including significant hands on troubleshooting skills with the ability to perform and analyze detailed packet captures.

All relevant certifications Comprehensive understanding of remote access technologies including dial, broadband, public wifi, 3G, SSL VPN and associated remote access security concerns such as authentication, policy enforcement, anti-virus, spyware, personal firewalls and reporting.
Strong understanding of network related integration technologies including NTLM, Active Directory, Radius, SecurID, LDAP, VM, blade servers and network admissions control.
Comprehensive understanding of Internet proxy; content caching, distribution, filtering and reporting; and webcasting technologies. This includes products like Cisco Content Engines, Websense and Webtrends.
Working knowledge on designing and implementing network intrusion detection using Cisco IDS products.
Hands on experience with Global IP load balancing, resiliency design and implementation using products like Cisco's GSS.
Experience design and implementing solutions based on Juniper's (Neoteris) IVE SSL VPN concentrator.
Thorough working knowledge of Citrix technology and how it integrates as part of secure remote access solutions.
Must have superior written and verbal communication skills.
Strong understanding of a global Microsoft Exchange environment.



As part of the Schering-Plough team, you?ll benefit from strong leadership, a new vision and an empowering corporate culture while enjoying competitive compensation and a progressive benefits package.