Cloud Security Engg Expert

**Meet our Team**

We represent Hitachi Vantara to enterprise clients across industries, establishing business relationships to understand customer challenges so that we can deliver profitable business for Hitachi products, services, and solutions. We collaborate as a team and cross-functionally to ensure the success of our customers; success that is celebrated and shared. Our solutions bring value to every line of business and we need people like you to build those deep relationships and to passionately articulate our value proposition.

**What you’ll be doing**
- Engineering Expert - Cloud Network Engineering Responsible for design and implementation of public cloud networking solutions.
- Provide engineering to operate and support mission critical infrastructure services to all consumers in Novartis which are in the scope of the BEF and/or COE, ensuring their stability and integrity.
- The Public Cloud Network Engineering Expert is Senior IT professional delivering technical expertise in support of public cloud network design and interaction within Novartis and with its Cloud providers of choice.
- Designs and develops IT network for public cloud
- The role ensures the successful end-to-end operation of IT security systems / the successful design, development, deployment and maintenance of monitoring solutions and services.
- The role supports the optimal planning and execution of all activities associated with cloud environments with a focus in scalability and performance.
- Public Cloud Network Engineer provides analytical support for incident and problem resolution

**What you bring to the team**
- Design, implement and maintain security/infrastructure requirements for development / testing environment
- Work in close collaboration with Architecture and Operations to integrate new solutions
- Ensure timely and cost-effective delivery of solutions required for new projects
- Ensure a high integration of infrastructure/security components
- Help to drive architectural improvements and standardization for the infrastructure/security environments
- Develop and enhance automated processes to release new solutions into the live environment
- Ensure controls are in place for all configuration items and only authorized changes are made for all assets within enterprise IT environment
- Accountable to ensure adherence with Security and Compliance policies and procedures within Engineering service scope In addition to accountabilities listed above in Job Purpose: Provides end-to-end analytical support to ensure the delivery of Service related requests.
- Communicates service requests to other IT resources that will be involved in fulfilling them. Responsible for defining, analysing, planning, measuring and improving all aspects of the availability of IT services.
- Proactively improves service availability wherever possible and optimizes the availability of the IT infrastructure to deliver cost-effective improvements that deliver tangible benefits to the business.
- Creates, maintains and regularly reviews an availability management system and a forward-looking availability plan, aimed at improving the overall availability of IT services and infrastructure components; so ensures that existing and future availability requirements can be met. Responsible for designing infrastructure components and systems required to provide a service. Provides incident and problem analytical support in support of resolution, follow up and prevention thereof.
- Support external technical resources in providing the right expertise to deliver and shape the service
- Ensure Public Cloud Service is delivered in line with Service Delivery manager
- Build knowledge and expertise in the specific areas covered by the Cloud Service
- Ensures necessary technical training, awareness and experience levels are maintained within the function
- Report to Service Deliver Manager on service issues and / or opportunities to optimize the public cloud services

**Mandatory skills**:

- AWS Direct Connect and Direct Connect Gateway
- AWS Transit Gateway, Transit VIF, Inter/Intra region Peering, Routing domains -Association Propagation in Transit Gateway.
- AWS Network Load balancers, Application load balancer and Importantly Gateway Load balancer implementation with Paloalto’s in Autoscale.
- AWS Private Link services ( end point and end point services)
- AWS Route 53 Resolver and Route 53 using Endpoints for DNS resolvers (private Hosted Zone
- VPC, VPC services (Nat gateways, Internet Gateways, VPN Gateway, subnets, route tables, ) Security Groups, Flow Logs
- Good knowledge of AWS IAM Policies, Roles, KMS
- Troubleshooting using, CloudWatch, Splunk, CloudTrail,
- Understanding of CloudFormation and infrastructure as a Code is required.
- Cisco CSR, Catalyst8000,
- Palo alto with advanced level of BGP implementation, Security profiles and Panorama Integration.
- Deep understanding of Routing technologies, like BGP, OSPF, NHRP etc
- DMVPN impleme