Website:
talent500.com
Job details:
About Ferguson:
Since 1953, Ferguson has been a source of quality supplies for a variety of industries. Together We Build Better infrastructure, better homes and better businesses. We exist to make our customers’ complex projects simple, successful, and sustainable. We proactively solve problems, adapt and grow to continuously serve our customers, communities and each other. Ferguson is proud to provide best-in-class products, service and capabilities across the following industries: Commercial/Mechanical, Facilities Supply, Fire and Fabrication, HVAC, Industrial, Residential Trade, Residential Building and Remodel, Waterworks and Residential Digital Commerce. Ferguson has approximately 36,000 associates across 1,700 locations. Ferguson is a community of proud associates who operate with the shared purpose of building something meaningful. You will build a career that you are proud of, at a company you can believe in.
Skills Required:
- Network Administration, Routing, Switching, Routers, Switches, Troubleshooting, Incident Response, Cisco Meraki, Meraki, HPE Aruba Networking Edge Connect, Orchestrator, HPE SSE, SASE, SD-WAN, NGFW, ZBF, IDS/IPS, VRRP, IPsec, GRE, SWG, SSL/TLS inspection, Zero Trust, ZTNA, VRF, 802.1X, RADIUS, REST API, Syslog, SNMP, NetFlow/IPFIX, SIEM, SOAR, Splunk, ServiceNow
Duties and Responsibilities:
Rogue Device Enforcement:
- Own the intake, investigation, and resolution of rogue devices
- Enforce defined network access and security policies, including device isolation and remediation actions
- Partner with Network Security to refine response procedures, thresholds, and enforcement standards
NOC Operations & Network Support:
- Support NOC incident response for network-related issues, including break/fix and service restoration
- Manage Layer 2 network devices and coordinate RMAs for faulty hardware
- Perform APC UPS and battery replacements to maintain infrastructure resilience
- Monitor network health using Meraki Dashboard and escalating issues as needed
Incident & Service Management:
- Leverage ServiceNow for incident, request, and problem tracking
- Provide timely communication and updates to global teams and US-based stakeholders
- Support ISP management activities including DIA circuits, modems, and provider coordination.
Qualifications and Requirements:
- 1-3 years of enterprise/branch network voice/data communications experience preferred.
- Proficient computer skills; must be comfortable in MS Office and related applications.
- Proficient network skills and experience; CCNA, CCNP, and additional certification relevant to the position is preferred but not required.
- Proficient troubleshooting experience and certification in wireless networking is preferred.
- Experience in an enterprise network operations environment, including large-scale deployments and refresh of multiple technical theaters.
- Experience with SD-WAN infrastructure and security protocols
- Experience within cloud management and technology
- Effective verbal and written communication skills
- Strong understanding of network fundamentals (Ethernet, Wireless, VLANs, ARP, STP, DNS, DHCP)
- Hands-on experience with Meraki wireless and switching environments preferred
- Familiarity with rogue device detection and network security best practices
- Experience with ITSM tools, preferably ServiceNow
- Understanding of hardware RMA processes
- Ability to operate in a 24x7 support environment
- Strong communication skills for global and US-based stakeholder interaction
- Self-directed, ownership-driven mindset with sound judgment under pressure
- Secure SD-WAN and SASE: Working knowledge of secure, cloud-ready network architectures that combine branch SD-WAN with cloud-delivered Security Service Edge (SSE) controls.
- Next-Generation Firewall: Experience with stateful and zone-based firewalling, application-aware policy enforcement, IDS/IPS, DoS/DDoS protection, anti-spoofing, and security event logging.
- High Availability and Resilience: Ability to support stateful high-availability designs, VRRP-based gateway redundancy, pre-established SD-WAN/VPN tunnels, path monitoring, and failover troubleshooting.
- SSL/TLS Inspection and Secure Web Gateway: Understanding of outbound SSL/TLS decryption, secure web gateway controls, URL categorization, content inspection, threat scanning, and policy-based cloud security steering.
- Centralized Orchestration and Automation: Experience centrally creating, deploying, and auditing network and security policies; familiarity with zero-touch provisioning, role-based access control, REST APIs, webhooks, and automated tunnel provisioning.
- Segmentation and Identity-Aware Policy: Strong understanding of security zones, VRFs, inter-zone policy, role-based segmentation, 802.1X, RADIUS, MAC authentication, and controlled traffic between Guest, IoT/OT, Corporate, and other network segments.
- Threat Intelligence and SIEM Integration: Familiarity with custom IDS/IPS signatures, URL/IP allow and block lists, reputation services, external threat intelligence, syslog export, and integration with SIEM, SOAR, or threat-intelligence platforms.
- HPE Aruba Networking Edge Connect: Hands-on exposure to HPE Aruba Networking Edge Connect SD-WAN and Orchestrator, or comparable enterprise SD-WAN and centralized policy platforms.
Preferred / Nice to Have:
- CCNA or equivalent networking training
- Experience with APC UPS systems and Structurer
- Prior NOC or Network Operations experience
- Exposure to security policy enforcement or SOC/NOC collaboration models
- API-Driven Operations: Experience using REST APIs for configuration management, firewall policy updates, and extraction of logs, metrics, alarms, and audit data.
- Monitoring and Telemetry: Familiarity with WebSocket alarms, SNMP polling and traps, Syslog, NetFlow/IPFIX, Splunk dashboards, and centralized security log analysis.
- Advanced Threat Detection: Awareness of cloud sandboxing, file detonation, zero-day analysis, multi-engine malware inspection, and endpoint quarantine workflows through NAC integrations.
- Offline Security Enforcement: Understanding of how branch appliances retain local policies, IDS/IPS signatures, URL categorization, and IP reputation data so enforcement can continue during temporary cloud-controller or WAN outages.
- Security Ecosystem Integration: Exposure to Aruba CX, ClearPass, HPE SSE, Splunk, MISP, ThreatConnect, Anomalies, BrightCloud/OpenText, Virus Total, ClamAV, or comparable technologies.
Click on Apply to know more.
