Clicking on the following button will update the content below

Network Engineer - Security
BrandBest Buy

Best Buy is not only a retailer but also a technology-based company, where technology itself is at the heart of our operation. Our Information Technology organization is transforming to play an even more integral role in helping the company define and execute key elements of the business model. Since 2004 Best Buy has operated its information technology functions in a largely outsourced structure and maintained a small internal team focused on aligning business strategies and the work of our outsourcing partners.

Today, Best Buy is moving to a multidimensional IT model and expanding the internal teams and capabilities necessary to drive the IT strategy, architecture and technology solutions that support Best Buy's growth. Our IT environment is fast-paced and constantly changing to meet the demands of our diverse business offerings. We seek talented, motivated professionals with a sense of adventure, diversity of thought, and the combination of creativity and experience to make a difference.

We are seeking a Network Engineer to help support, build and innovate our network security capabilities. This engineer will work with other engineers to implement, manage support, troubleshoot and improve all areas of network security. Technology solutions we are responsible for include the following services: Cisco based route, switch campus. remote site and data canter infrastructure, Cisco and Aruba wireless technologies, Infoblox DNS/DHCP/IPAM, global and local load balancing solutions, security solutions to include firewalls, proxies, VPN, web application firewalls SSL decrypt, NAC and cloud based computing solutions. This engineer will be working on our network security team in collaboration with our remote site and data center connectivity teams as well as other infrastructure and application teams.

Responsibilities include:
  • Assist with design, implementation integration and support network security technologies. Support integration with data center, cloud and end user network architectures and network connectivity technologies. This could include retail locations, campus, as well as the data centers.
    • Examples include: Cisco ACI solution with Cisco Nexus 9K switches, standard port based firewall (routed and transparent), Next Generation firewalls, VPN platforms (IPSec & SSL), proxy platforms, Cisco ISE, web application firewall (WAF) platforms and working with load balanced environments
  • Collaborative wok to create stronger network standards and processes for Tier 1 through 3 staff
  • Contribute to continuous improvement roadmaps for network security technologies
  • Work with peer engineers, project Management, architecture, business, technical and network connectivity teams to achieve project delivery with regard to network related initiatives.
  • Escalation support for Firewalls, VPN, proxy, SSL Decrypt and other security potential solutions as assigned (URL Filtering, WAF, ISE)
  • Collaboration with cross-functional teams to ensure alignment and resolve concerns
Our Network Engineer will:
  • Maintain a working knowledge of security and network standards
  • Build strong relationships with stakeholders- Performing as a consistent champion of process.
  • Work with peers, leadership and architecture teams to advance and improve the current network security capabilities.
  • Take leadership on root cause analysis of problems and potential solutions with respect to your area of expertise
  • Have a desire to continually grow domain knowledge of infrastructure services
Basic Requirements:
  • 3 years' experience in networking with responsibilities including the support including the support of security hardware
  • Demonstrated experience supporting Firewalls, Proxies, VPN, URL Filtering solutions, Reverse Proxies, Decrypt Appliances
  • Recent hands on experience with enterprise firewall and VPN platforms (preference is Cisco ASA/Sourcefire & Firepower)
  • Recent hands on experience with Router Zone Based Firewalls and ACLs (Cisco preferred)
  • Prior experience with Proxy and SSL Decrypt solutions (Bluecoat and A10 preferred)
  • Routing Protocol knowledge (BGP, OSPF, EIGRP)
  • Prior experience working with multiple data center and perimeter security environments
  • Ability work on-call and alternative hour schedules when required
  • Bachelor's or advanced degree in IT, Computer Science, business or related field, or appropriate industry certification
  • Prior experience engineering networks with more than 2000 devices
  • Prior experience Firewall Management Systems (Cisco Preferred)
  • Prior experience Web Application Firewalls (such as Citrix Netscaler, F5)
  • Prior experience with Load Balancers (Local & Global, Citrix and F5 preferred)
  • Prior experience with the DNS/DHCP (Infoblox preferred)
  • Prior experience with NAC solutions (Cisco preferred)
  • Prior experience using network monitoring and troubleshooting tools (Examples include: Tools such as ExtraHop, Statskeeker, solarwinds, Cisco suite of management tools)
  • Prior experience with some of the following Network and Security technologies and solutions including but not limited to: Cisco Nexus 9000/7000/5000/2000, Wireless LAN controllers, fixed configuration switches, and Cisco ISR and ASR series routers, Software Defined Network solutions (such as Cisco ACI), Cisco ISE support for both RADIUS/TACACS and security group tagging
  • Prior experience with API integrations
  • Prior experience with common network scripting programming languages
  • Prior experience in a global enterprise

Auto Req. ID782631BR
Employment CategoryDigital & Information Technology
Job LevelIndividual Contributor
Location Number940050-105-Network Services
Address7601 Penn Avenue South


Clicking on the following button will update the content below