PG&E Corporation Hiring for Expert Cybersecurity IT Solutions Engineer Job at Sacramento, CA Full Time

Information Systems Technology Services is a unified organization comprised of various departments which collaborate effectively to deliver high quality technology solutions.

Position Summary

The Expert Cybersecurity IT Solutions Engineer is a highly organized, thorough, security-minded problem solver focused on the protection of PG&E information system assets against compromise and cyber-attacks. The successful candidate is responsible for planning, implementing, deploying, and maintenance of security solutions to ensure the stability and security of PG&E infrastructure for both on premise data centers and cloud deployments. They will have extensive knowledge and broad functional experience with Firewalls, AWS, ADC, IDS/IPS across a wide range of complex architectures, platforms, and mediums. The successful candidate will have extensive knowledge of Application Delivery Controller and Web Application Firewall technologies, as well as experience with integrating them with Single Sign On and other tools. This position will help in the secure deployment of network systems and help in the administration of same in a mission-critical, 24/7 environment.

The successful candidate must be able to implement high-level designs, provide constructive feedback and input to architects and update operations documentation for any new configurations or procedures resulting from changes to production environments. They must also document all work for metrics and billing reporting using a designated change management or request system. They also participate in audits from outside vendors and government regulators (NERC, WECC, etc.).

The position is hybrid, working primarily from your home office with in-person visits 1-2x monthly or as business needs require. The headquarter location is flexible and can be based out of Auburn/Sacramento/Concord/Oakland.

PG&E is providing the salary range that the company in good faith believes it might pay for this position at the time of the job posting. This compensation range is specific to the locality of the job. The actual salary paid to an individual will be based on multiple factors, including, but not limited to, specific skills, education, licenses or certifications, experience, market value, geographic location, and internal equity. This job is also eligible to participate in PG&E’s discretionary incentive compensation programs.

A reasonable salary range is: ​

California Minimum: $ ​112,000

California Maximum: $ ​179,000

Job Responsibilities

Accountable for creating comprehensive technology platform solution designs that meet PG&E business solution requirements on complex IT projects.

Collaborating with stakeholders, leads the development of an implementation that utilizes the best of IT standards, service offerings and operational options to develop an implementation approach of technology solution alternatives.

Will ensure that the physical design and configuration of the delivered solutions are in direct alignment with the logical design and is often lead/owner in the solution design stage (within their discipline).

Leads by collaboration with other technical teams in the exchange and transfer of technical knowledge, and in the development and evolution of IT standards, guidelines, solutions, planning and implementation.

Provides guidance and examples to other solution engineers for the documents and deliverables to assure consistency in the Project Delivery Methodology, and occasionally leads initiatives toward process and project delivery improvements.

Delivers training and presentations from small to medium groups to improve skills of others and understanding across a medium span of influence.

Leads others in the promotion, development and reuse of common solutions, components, and services

Collaborate with and often leads other domain specific (application, infrastructure, or information) Engineers, Architects, Product Specialists, System Design Engineers, and technologists to complete IT deliverables.

Work with other engineers, architects, and product specialists to ensure that the products and components work together to meet the objectives and performance goals as defined in the requirements.

Serves as technical advocate and is the voice for IT operations on the implementation strategy designed to address client business problems.

Responsible for the full lifecycle technical implementation, with SME participation in; solution evaluation and selection, buy vs. build decisions, business requirements impact analysis

Generates or assists business in generation of Project Concept estimates and refinement of early-phase project estimates which contribute to the business case, and implementation level design.

Provides critical support function for Solution Engineering design decisions during plan, analyze, design, build, test, and deploy phases of IT projects.

Assignments are broad and complex, have major associated risks with high visibility, and can be sensitive or widely varied requiring expert judgment in applying and adapting techniques.

The work product has potentially significant impact (financial, public perception, operational, legal) on the Company; incumbent and the team represent the company’s interest in a project with clearly “high stakes” under general guidance.

Qualifications

Minimum:
BA or BS degree in Computer Science, Engineering, Business or related discipline or equivalent experience

8 years of IT engineering design and/or technical implementation, network, or IT operations experience

Desired:
Experience with multi-tier enterprise technology environments

Experience directing staff across diverse IT disciplines

CISSP or other industry standard network security certification

Experience in the Utility Industry and meeting audit requirements for NERC and WECC

Experience with Application Delivery Controllers (preferably F5)

Experience with Web Application Firewalls

Experience with Palo Alto next generation firewalls

Experience with Cisco VSG or VMWare ESX firewalls

Experience with encryption protocols

Experience with VPN using IPSec or SSL VPN

Experience with firewall rule automation tools, such as Tufin

Experience with monitoring or syslog collection/analysis tools

Experience with Cloud-based solutions

Experience with IDS/IPS

Experience with Packet capture tools, including Wireshark and ANUE/IXIA

Experience or knowledge of DNS and DHCP

Experience with web, middleware, or database servers

Experience with Cyclades or other serial console terminal servers

Knowledge, Skills, and Abilities:
Demonstrated team player with strong and effective customer care skills

Experience building and maintaining complex network maps

Experience with developing scripts to automate infrastructure deployment and collect metrics

Experience with Automation software such as Ansible, Chef, Jenkins, and Puppet

Experience with various network security tools such as Infoblox (IPAM, DNS), Cisco ISE, PRTG, Netbrain, Tufin, Skybox and QRadar

Familiar with network monitoring tools such as NetMRI, Netflow, and provide metrics in this area

Experience with multi-vendor firewall technologies including Palo Alto Networks and Cisco

Experience with F5 Application Delivery Controllers

Experience in Network monitoring and troubleshooting techniques, including SNMP monitoring tools, packet sniffing, and protocol analysis.

Understanding of network security concepts, including segmentation and defense-in-depth strategies

Ability to create VLANs, routes and configure network interfaces on switches, routers, and firewalls to facilitate the building of DMZs and create network segmentation

Ability to troubleshoot and pinpoint network issues outside of firewalls

Understanding of network concepts from layer 2 through 7 including NAT/PAT and NGFW application identification

Ability to collaborate with Architects, Solutions Engineers, and Project Managers to meet aggressive project deadlines.

Available for 24×7 on call rotation