Job Description
Note: The job is a remote job and is open to candidates in USA. Gotham Technology Group is seeking a Senior Network Security Consultant to lead a comprehensive technical review and cryptographic modernization of Client and Extranet IPSec VPN tunnels. The role requires deep expertise in enterprise VPN infrastructure, network traffic analysis, and security policy validation, ensuring effective documentation and stakeholder coordination throughout the process. Responsibilities • Enumerate and document all Site-to-Site Client and Extranet VPN tunnels across US and International GCIS networks • For each tunnel, capture and validate: • Client details: company name, address, business and technical contacts • Client gateway IP and BR gateway IP • Client remote networks and ACLs; BR local networks and ACLs • Route exchange configuration and distribution lists • IPSec protocols in use and proposed upgrades, PFS settings, cipher strength, and key details • Group policy and security policy assignments • Determine tunnel activity status through VPN status checks and NetFlow analysis • Identify applications in use per tunnel via source/destination/service mapping • Leverage Infoblox and CMDB to map tunnels back to SRE and Application owners • Compile and deliver findings to BISG to support audit remediation activities (separate scope) • Coordinate technical validation and change activities with internal network teams and client technical contacts • Provide clear, structured documentation suitable for audit and remediation workflows Skills • 7+ years of hands-on experience in network security engineering, with a focus on IPSec VPN infrastructure • Deep knowledge of Site-to-Site VPN design, troubleshooting, and cryptographic standards (IKEv1/v2, AES, SHA, PFS, DH groups) • Proficiency with traffic analysis and monitoring tools: Niksun, NetScout, Wireshark • NetFlow / Cisco StealthWatch • Experience with Infoblox and enterprise CMDB platforms for asset and ownership mapping • Strong understanding of ACL design, route distribution, and security policy frameworks • Ability to work independently in a fully remote, fast-paced environment with immediate availability • Prior experience in large-scale VPN audit or cryptographic modernization programs • Familiarity with GCIS network environments (EDG/CLF/COL/POK/International) • Experience interfacing with audit and compliance teams (e.g., BISG) • Relevant certifications: CCIE Security, CISSP, or equivalent Company Overview • Gotham Technology Group is a provider of guidance and direction to IT professionals. It was founded in 2001, and is headquartered in Montvale, New Jersey, USA, with a workforce of 51-200 employees. Its website is Apply tot his job
Apply tot his job
Apply To this Job