Job Description

Position responsibilities included but not limited to:

* Assisting in the engineering of the application connectivity through Security Operations (SecOps) managed firewalls, creation and management of the documentation for the connectivity in the Citi Connectivity Registry (CCR).

* Represent the registered connectivity for approval on the Third Party Access Solutions Working Group (3PASWG) Weekly Call.

* Reviewing the Firewall Change Request for accuracy and compliance in support of third party connectivity requests.

* As the technical lead, this member will need to provide technical guidance to other team members.

* Provide technical guidance to the Business, ISO's the clients and the vendors.

* Ensure the business registers third parties in CASP (Citigroup Approved Service Providers) database and the requested applications show up listed in the Citigroup Systems Inventory (CSI) or Citigroup Technology Catalog (CTC).

* Will work with client organizations, Helpdesk and other CT groups to ensure all firewall and ACL related troubles correctly documented in a timely manner.

* Must possess the ability to document any new policies and/or procedures into the appropriate format.

* Work with other group members to ensure that the Process Control Management documentation and other documentations (drawings, databases, spreadsheets, etc.) are up to date and accurate.

Key Responsibilities:

* Queue Management - distribute workload assignments to team members globally while maintaining your own workload.

* Triage global DL emails assisting client needs

* QA peer queues weekly.

* Train and mentor new employees.

* Process Firewall, Proxy, RAS requests and perform risk assessments to ensure that the connectivity is compliant with Citi Information Security Standards and IS Policies.

* Provide Information Security oversight and guidance to Citi businesses requiring 3rd party connectivity as it relates to Citi Information Security Standards and IS Policies.

* Liaise with multiple technology teams (i.e. CATE Network Engineering; Proxy OPs and Integration; Perimeter Security Ops; System Based Computing; Remote Access Services and Business Information Security Officers); to facilitate cross-functional solutions as it relates to 3rd party connectivity aligning with Citigroup Information Security Standards.

* Work modality solutions to include (but not limited to) RAS, B2B, Firewall; Proxy; illumio and TPA solutions.

* Test and pilot system enhancements/changes and/or other products such as: Citi Connectivity Registry (CCR), CMP, illumio SelfService and ResolveIT as it relates to ECM functionality

Qualifications/Skills:

* Bachelors degree or equivalent experience

* 6-10 years of relevant experience

* Illumio - advanced working knowledge of illumio Adaptive Security Platform with focus on operation and troubleshooting of Policy Compute Engine (*PCE) and Virtual Enforcement Node (VEN).

* Experience as a business systems analyst working with Support and Services functions such as case management, call management, professional services automation, and education services.

* Basic networking knowledge and an understanding of basic network security standards such as Access Control Lists (Firewall Filters), VLANs, and Security Zones.

* Solid understanding of security technologies / disciplines such as firewalls, intrusion prevention, encryption, threat analysis, and vulnerability assessment.

* Progressive IT experience, ideally holding positions in both IT Infrastructure & Operations as well as Network / Operations Security preferred

* Experience in managing process improvement projects.

* Self-motivated, proactive and with determination to achieve goals

* A drive to solve practical business problems with client-centric solutions.

* A high attention to detail.

* Strong organization, problem-solving and systems analysis skills.

* Strong written and verbal communication skills.

* Enjoy learning new technologies, applications and systems.

* An enthusiastic self-starter with a commitment to learning, customer empathy and team communication.

* Experience at a bank or financial institution preferred

* Possess the ability to document any new policies and/or procedures into the appropriate format.

* Flexible and able to deliver quality results in the required time-frame

* Execute daily ad-hoc tasks or lead small projects as needed.

Required Skills:

Firewall Administration 4 - 8 yrs.

TCP/IP Protocols

IPsec/GRE/GETVPN

Network Administration 4 8 yrs.

Routing Configuration

Access Control Lists

TCP/IP Protocols

IPsec/GRE/GETVPN

Encryption 1 3 yrs.

Encryption Algorithms

Hardware Encryption (Encryptions/IPsec/GRE/GETVPN)

Software Encryption (NDM/FTP/Application)

VPN solutions

Preferred Skills:

Illumio Advanced Administration

Project Management 1 3 yrs.

Management of Technology Projects including

Platform Migration

Data Migration

Network/Firewall Connectivity

UNIX (Sun Solaris) 1 - 3 yrs.

Administration

Security Configuration

Scripting

Web Services and FTP

-------------------------------------------------

Job Family Group:

Technology

-------------------------------------------------

Job Family:

Information Security

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries (Citi) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the EEO is the Law poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting