IT Engineer-Cybersecurity-NetSec

The IT Engineer is responsible for building, testing, and maintaining technical products and platforms in support of Casey's strategic objectives. May involve coordination on projects and/or system maintenance activities.

Key Responsibilities

• Maintain existing network security solutions and contribute to development of new technically complex solutions by analyzing and identifying areas of modification and improvement. Develop new routine solutions to meet requirements.
• Manage and configure Palo Alto next-generation firewalls and Panorama management systems.
• Ensure the security of networks in cloud-based infrastructure, particularly Azure and OCI (Oracle Cloud Infrastructure).
• Develop and enforce network security policies to protect sensitive data and comply with industry regulations.
• Collaborate with IT teams to enhance the overall security posture of the organization.
• Provide technical support and training on network security best practices and procedures.
• Respond to network security incidents and provide thorough post-event analysis.
• Proactively learn complex engineering and business industry best practices and incorporate new skills into rapidly changing environments.
• Design, develop, execute, and maintain complex automated unit tests to ensure quality of solution being built.
• Research and suggest improvements to increase quality of the technical solution and supporting infrastructure to better meet users’ needs.
• Perform other duties as assigned.
  
  

Casey's is not able to offer employment sponsorship for work authorization in the United States for this role at this time.

This role does not allow for 100% remote work. Qualified out of state candidates must be willing to relocate and will need to live within a daily commutable distance of Casey's Store Support Center in Ankeny, IA and be willing to work onsite 5 days a week.

Compensation

Starting pay range:‏‏‎ ‎$81,200‏‏‎ ‎-‏‏‎ ‎$111,700. Actual pay may vary based on Casey’s assessment of the candidate's knowledge, skills, abilities (KSAs), related experience, education, and qualifications. Other factors impacting pay include local prevailing wages and internal equity. This position is eligible for an annual cash bonus based on company performance. Our full salary range for this role does extend beyond the hiring range listed, allowing team members the opportunity to continue to grow within the company.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or equivalent years of related work experience.
• Minimum Three (3) years of experience building and maintaining technical solutions in a business environment.
• In-depth knowledge of configuring, managing, and troubleshooting a wide set of Palo Alto next-generation firewalls (NGFW) features and capabilities, Panorama, GlobalProtect, Prisma Access, and Cortex Data Lake.
• Understanding of Azure Resource Manager and Azure networking concepts including VNets, subnets, load balancers, network security groups, remote network gateways, route tables, Azure route server, etc.
• Familiarity with network protocols (TCP/IP, SSL/TLS, IPSec, BGP, etc.) and security methodologies.
• Experience configuring, managing, and troubleshooting email security systems.
• Fundamental understanding of Windows, Mac, and Linux operating systems including familiarity with command line interfaces and network troubleshooting tools (ping, traceroute, Wireshark, tcpdump, etc.).
• Experience in handling security incidents, including the use of SIEM (Security Information and Event Management) tools for monitoring and reporting.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation of security tasks.
• Knowledge of industry-standard compliance frameworks like NIST (National Institute of Standards and Technology) and PCI DSS (Payment Card Industry Data Security Standard).
• Excellent interpersonal, verbal, and written communication skills.
• Actively contributes ideas and insights during discussions to enhance team outcomes.
• Capable of working independently with minimal supervision or as part of a team. Strong analytical and problem-solving abilities.
• Detail-oriented, organized, and self-motivated. Able to prioritize and manage multiple projects efficiently.
• Skilled in identifying and solving problems.
  
  

Other Requirements

• Possession of relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CCNA (Cisco Certified Network Associate), Security+, or PCNSE (Palo Alto Certified Network Security Engineer) is desirable, but not required.
• Prefer candidates with 5-10 years of networking/network security experience.
• Experience with PKI/certificates, EDR tooling, email security, application whitelisting, and/or cloud infrastructure is also a plus.