Network Security Engineer III - Chicago, United States - McDonald's

Description

McDonald's evolving Accelerating the Arches growth strategy puts our customers and people first, and leverages our competitive advantages to strengthen our brand. We are recognized on lists like Fortune's Most Admired Companies and Fast Company's Most Innovative Companies.

Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)

Our growth pillars emphasize the important role technology plays as the leading, global omni-channel restaurant brand. Technology enables the organization through digital technology, and improving the customer, crew and employee experience each and every day.

Global Technology forging the way

Leading the digitization of our business is the Technology organization made up of intrapreneurs who build industry defining tech using the latest innovations and platforms, like AI and edge computing to deliver on the next set of cutting-edge opportunities for the business. At McDonald's you get to solve technology innovation challenges at an incredible scale, and work across global teams who are always hungry for a challenge. This provides access to exciting career paths for technologists. It's bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.

Check out the Global Technology Technical Blog to learn how technology is directly enabling the Accelerating the Arches strategy.

This opportunity is part of the Global Technology Infrastructure & Operations team (GTIO), where our mission is to deliver modern and relevant technology that supports the way McDonald's works

The Network Security Engineer III (Manager level) will design, implement, and maintain the McDonald's network security infrastructure and systems. You will play an essential role in ensuring that McDonald's network is secured from both internal and external threat landscape.

The successful candidate will have superb communication and problem-solving skills, as well as the ability to work well in a global team.

Accountabilities and Responsibilities:

This team is responsible for securing of McDonald's information assets at a global level. This role will be part of the group within Global Technology that is responsible for our critical network security services, including firewall, IPS/IDS, Content Filtering, SASE, SSE, ZTNA, VPN, NDR and DDoS. You will work closely with market technology teams, Global Technology Risk Management teams, Global Technology Infrastructure and Operations teams, application owners, key vendors, and others to ensure the proper design, implementation and operations of McDonald's network security platforms and services.

• Design, implement, and operate global network security platforms that supports global, corporate and restaurant network infrastructure and operations.
• Configure and handle firewalls, intrusion detection/prevention systems, NAC, VPN, SSE and other security platforms.
• Collaborate with Technical Product Managers, architects and managed service partners to innovate and deliver network security and wider NIO outcomes.
• Drive automation first approach to platform and configuration deployment. Adopt Infrastructure as code.
• Produce test plan, create test cases and perform functional and non-functional testing of network security platforms.
• Monitor and predict platform capacity and performance related issue and work with TPM to resolve it before it becomes an issue.
• Remain up-to-date on emerging technologies and architecture and propose ways to use them in current and upcoming projects.
• Support technical assessments and vendor selection to develop and deploy groundbreaking platforms, spanning beyond traditional technologies.
• Maintain comprehensive documentation for platform designs, configurations and configuration standards,, changes, and troubleshooting procedures.
• Support the NDR/NSOC function to respond to network security Incidents in a quick and effective manner including development and testing of emergency response plans for network security incidents.
• Effectively communicate project health, risks and issues to the program collaborators, sponsors and management teams.
• Resolve most conflicts between timeline, budget, and scope independently but intuitively escalate complex or consequential issues to senior management.
• Drive continuous service improvements for network security platforms and processes.
  
  

• Subject matter expert in Network Security Platforms such as Firewalls, NAC, IDS/IPS, VPN., NDR and/or SASE technologies.
• Demonstrable experience (7+ Years) with design and deployment of Network Security technologies.
• In depth knowledge and experience (7+ years) with one or more of the following
  • Firewall (Palo Alto, Cisco, Check Point and/or Cloud Native) installation, administration and management.
  • SASE/SSE solutions such as Zscaler, Cisco, and/or Palo Alto SASE solutions
• 7+ years' of experience with Network technologies (Switching/Routing)
• Strong analytical and troubleshooting skills.
• Proficient in leading collaborator expectations and conflict resolution.
• Confirmed experience working in an Agile environment with a Scrum Master, Daily Scrum meetings, Backlogs, Sprints and written Stories and deliverables. Familiar with documentation process and tools, JIRA and Confluence preferred.
• Track record of successful automation using tools such as Ansible, Terraforms, python etc.

Desirable Skills Experience:

• Bachelor's degree or 7 years relevant experience.
• Experience with Large Global Networks.
• Experience with designing, deploying, and managing NAC solutions.
• Experience in driving continuous service and process improvements and translating them into viable solutions.
• Knowledge of networking protocols such as OSPF, BGP, VTP, TCP/IP, DNS, DHCP, LAN/WAN, and VPN design.
• Experience with network monitoring solutions.
• Experienced with Dev/Ops and CI/CD pipeline tools and processes are advantageous.
• Experience in leading a 24x7x365 team.
• Professional certifications such as CCNP Security, PCNSE, FCNSP, CISSP, or similar
  
  

McDonald's is committed to providing qualified individuals with disabilities reasonable accommodations to perform the essential functions of their jobs. Additionally, if you (or another applicant of whom you are aware) require assistance accessing or reading this job posting or otherwise seek assistance in the application process, please contact

McDonald's provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.