Network Engineer III

Department Overview

This position belongs to the Global Technology Infrastructure & Operations team (GTIO), where we aim to deliver modern and relevant technology supporting McDonald's operations. We offer outstanding foundational technology products and services such as Global Networking, Cloud, End User Computing, and IT Service Management. Our goal is to consistently deliver an engaging, relevant, and simple experience for our customers.

Reporting to the Director Global Network Security, the Senior Network Security Engineer will build, implement, and maintain the McDonald’s network security infrastructure and systems. You will play a meaningful role in ensuring that McDonald’s network is protected from both internal and external threat landscape.

The successful candidate will have strong technical skills, excellent communication, and problem-solving abilities. They should collaborate effectively with a distributed team. This role is a great opportunity for a motivated and skilled Network Engineer to join the technology team. It allows for making a meaningful impact on the organization's operations and success.

Duties

Global Technology is the team responsible for protecting McDonald’s information assets worldwide. This role will join the group within Global Technology that manages our essential network security services, such as firewall, IPS/IDS, Content Filtering, SASE, SSE, ZTNA, VPN, NDR, and DDoS. You will collaborate closely with market technology teams, Global Technology Risk Management teams, Global Technology Infrastructure and Operations teams, application owners, key vendors, and others to ensure the accurate development, deployment, and management of McDonald’s network security platforms and services.

• Build, implement, and operate global network security platforms that support global, corporate, and restaurant network infrastructure and operations.
• Configure and manage firewalls, intrusion detection/prevention systems, NAC, VPN, SSE, and other security platforms.
• Collaborate with Technical Product Managers, architects, and managed service partners to innovate and deliver network security and wider NIO outcomes.
• Provide immediate assistance and problem-solving for our customers beyond normal business hours.
• Drive automation first approach to platform and configuration deployment. Adopt Infrastructure as code.
• Produce test plans, develop test cases, and perform functional and non-functional testing of network security platforms.
• Monitor and predict platform capacity and performance-related issues and work with TPM to resolve them before they become issues.
• Strategize, consult, and prototype alongside other engineers to implement guidelines and solutions for our customers using the latest network security technologies.
• Stay up-to-date on new technologies and architecture and propose ways to use them in current and upcoming projects.
• Support technical assessments and vendor selection to develop and deploy innovative platforms, spanning beyond traditional technologies.
• Drive proof of concepts and conduct technical feasibility studies for business requirements.
• Maintain comprehensive documentation for platform builds, configurations, configuration standards, changes, and troubleshooting procedures.
• Support the NDR/NSOC unit in handling network security incidents rapidly and successfully, involving the development and assessment of emergency response plans for network security incidents.
• Communicate project health, risks, and issues effectively to program collaborators, sponsors, and management teams.
• Resolve most conflicts between timeline, budget, and scope independently but bring up complex or consequential issues to senior management when necessary.
• Identify and direct changes through appropriate review and approval mechanisms.
• Foster continuous advancement of network security platforms and processes.

Qualifications

• Specialist in Network Security Platforms including Firewalls, NAC, IDS/IPS, VPN, NDR, and/or SASE technologies.
• Demonstrable experience (7+ years) with the development and deployment of Network Security technologies.
• Extensive expertise and background (7+ years) with one or more of the following: Firewall (Palo Alto, Cisco, Check Point and/or Cloud Native) installation, administration, and management.
• SASE/SSE solutions such as Zscaler, Cisco, and/or Palo Alto SASE solutions.
• More than 7 years of experience with Network technologies (Switching/Routing).
• Strong analytical and troubleshooting skills to critically evaluate information gathered from multiple sources.
• Proficient in managing collaborator expectations and conflict resolution.
• Demonstrable strong analytic and problem-solving abilities.
• Proven experience working in an Agile environment with a Scrum Master, Daily Scrum meetings, Backlogs, Sprints, and written Stories and deliverables. Familiar with documentation process and tools, JIRA and Confluence preferred.
• Track record of successful automation using tools such as Ansible, Terraform, Python, etc.

Desirable Skills Experience:

• Bachelor's degree or three years relevant experience.
• Experience with large global networks.
• Experience with designing, deploying, and managing NAC solutions.
• Experience in driving continuous service and process improvements and translating them into viable solutions.
• Knowledge of networking protocols such as OSPF, BGP, VTP, TCP/IP, DNS, DHCP, LAN/WAN, and VPN build.
• Experience working with network monitoring tools.
• Advanced ability to manage multiple projects simultaneously.
• Experience with Dev/Ops and CI/CD pipeline tools and processes are advantageous.
• Experience in leading a 24x7x365 team.
• Professional certifications such as CCNP Security, PCNSE, FCNSP, CISSP, or similar.

Compensation

Bonus Eligible: YES

Long - Term Incentive: YES

Benefits Eligible: YES

Salary Range

The expected salary range for this role is $127,332.00 - $159,165.00 per year
 
The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.