About the Role

The Advisory Network Security Engineer will ensure the proper functioning of all network-based security controls across MiniMed. Perform as a leader on a team of network / system operators with the appropriate expertise to

deploy, maintain, and operate MiniMed's security tool stack. Develop operational rigor as evidenced by e.g. policies, runbooks, change control, and 24 x 7 x 365 ability to ensure tool stack availability and service delivery.

Cultivate and maintain deep working relationships with partners throughout MiniMed, built on strong personal and team capability, as well as a track record of execution. Enhance a powerful team culture that nurtures quality performers.

Key Responsibilities

• Work with internal partners from Cyber Security, IT, and Data Protection teams to select, implement, and support network security platforms and tools.

• You will create an internal service catalogue of these controls, understanding key attributes for each, such as user experience, SLA, downstream impacts, etc. Work with internal and external audit teams to document, review, and satisfy required controls for audits, automating the controls as much as possible.

• Work with the security architecture team and control operators with a core network-centric body of knowledge, and solution-specific knowledge as needed to support network security initiatives to protect the Minimed business units.

• You will help develop a multi-functional knowledge management program to train new hires effectively on Minimed environments and tools, ensuring broad diffusion of knowledge among the team.

• Develop strong, auditable processes and artifacts to ensure seamless continuity of network security operations.

• Deliver 24 x 7 x 365 global operational capability, ensuring tool stack availability, coverage, and proper functioning.

• You will work closely with colleagues in Identity and Access Management, Cyber, and Architecture / Engineering teams to deploy, configure, patch, operate, and decommission security hardware and software.

• This role will specifically focus on network-based controls, such as firewalls, IDS / IPS, DNS security, outbound web proxy, email security, packet capture, flow analysis, RADIUS, 802.1x, NAC, etc.

• Planning, engineering, and monitoring the security arrangements for the protection of the network systems.

• Display a real passion for information security and the intricacies of hardening and securing systems and networks.

Basic Qualifications

• College Diploma.

• 10+ years technical experience in network operations, such as the deployment, configuration, maintenance, and operation of switches, routers, gateways, DNS servers, VPN concentrators, etc.

• 10+ years technical with firewalls, IDS, IPS, web proxies, email security systems, packet capture, flow analyzers, firewall rule analyzers, etc.

• 5+ years experience with Palo Alto, Fortinet, and Next Generation Firewalls.

• 5+ years experience with Zscaler Security Products (Zscaler Internet Access and Zscaler Private Access)

• Available to participate in a 24 x 7 x 365 global network security operations capability.

• Available to participate in the hiring and training of staff, development of policies and procedures, maturation of processes and change control, development of key artifacts, and the ability to work with auditors with limited supervision.

• Available to maintain coverage of emergency issues around the clock (to be shared with managed service provider).

Required Knowledge and Experience:

• Requires highest knowledge and mastery of multiple job areas typically obtained through advanced education combined with experience.
• Viewed as the leading expert and / or resource within the field by peers within and outside the organization.
• Requires a Baccalaureate degree (or for degrees earned outside of the United States, a degree which satisfies the requirements of 8 C.F.R. a7 214.2(h)( 4)(iii)(A) and minimum of 15 years of relevant experience, or advanced degree with a minimum of 13 years of relevant experience.

Preferred Qualifications (assets)

• Strong written and oral communications skills.

• Demonstrated experience determining newest technologies and processes that create noticeable improvements to the overall security ecosystem.

• Experience using industry-standard analysis criteria to test the security level of a system or network.

• Meraki MX security appliances

• Experience with design and engineering of security controls.

• Experience with data center hardware installation and maintenance.

• Current CISSP or other industry-standard information security certification (Desired)

Additional information:

Immigration sponsorship is not supported for this position.

Physical Job Requirements

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.

Benefits & Compensation

MiniMed offers a competitive salary and flexible benefits package

At MiniMed, we put people first. A commitment to our employees lives at the core of our values: We recognize their contributions. They share in the success they help create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every stage of your career and life.

This position is eligible for an annual long-term incentive plan.