Network Security

Position Purpose

The main activities of the Head iNet is to manage, maintain, implement and promote secured, robust, stable, redundant, Network Security infrastructure. Explore, evaluate and propose latest technologies in security domain. Lead BAU team for operational activities, any critical incident or task. The person will lead the team ensuring effective service management to meet service-level agreements and control costs.

Responsibilities - Technical & Behavioral Competencies

The iNet engineer acts as escalation point for technical issues regarding iNet technology platforms and works jointly with other infrastructure teams for delivering projects and implementing required changes in the iNet technology platforms as well as keeping the platform up.

The iNet team supports the following technologies:

• Firewall Systems (Checkpoint & Fortinet)

• Global Traffic Managers (F5)

• Load Balancers (F5 & AVI networks)

• SSL Accelerators (F5)

• DNS/DHCP (Infoblox)

• Proxies (SkyHigh Web Gateway & Bluecoat)

• HSM Appliances (Entrust)

The technical environment of this position is as follows. Proven track record in at least two of these is required:

Firewalls: Advanced knowledge of concepts relating to firewall platforms and related network environments (platform architecture, topologies, protocols...).

Operational experience of Fortinet and Checkpoint technologies appreciated.

Proxies: Strong familiarity of http and SSL/TLSs protocols, and mastery of concepts related to proxy technology (functional scope and purpose, traffic intermediation and security stack...).

Operational experience of SkyHigh and Bluecoat technologies appreciated.

Load-balancing: Strong familiarity of load-balancing concepts (topologies, platform architecture, load-balancing algorithms & parameters...) and DNS/GSLB load-balancing.

Experience with F5 technology appreciated.

DNS/DHCP: Familiarity of concepts and architectures relating to DNS, DHCP and IPAM.

Operational experience of Infoblox technology appreciated.

Remote access: Familiarity of concepts and protocols related to end-user VPNs (both IPSEC & SSL).

Operational knowledge of Cisco ASA/FTD platforms appreciated.

Administration: Operational knowledge of monitoring software (Zabbix / solarwinds / HPOO / Dynatrace...) and protocols (mostly SNMP).

Ability to use, repurpose, troubleshoot, and possibly develop administration scripts (python, bash, perl).

Operational experience of Ansible use for automation & deployment.

The key responsibilities for this role are:

Adapt and maintain standard firewall, load-balancer, proxy and DDI architectures and ensure supporting documentation is accurate.

Maintain platforms (software and hardware lifecycle management) for all technology described above.

Define & deliver vision and roadmap in collaboration with the head office.

Prioritize teams backlogs based on objectives and work at hand.

Leads vendor relationships with owned technologies.

Interacts with stakeholders across the organization to understand their security needs and expectations.

Ensure that all systems are properly monitored and manage alerts when they happen.

Ensure that all asset referential are kept up to date, and manage remediation when reconciliation shows some gaps

Expected profile:

8+ years of hands-on field experience in the iNet technical scope.

Ability to work efficiently under pressure in high-stress incident situations.

Demonstrate leadership experience with large, complex programmes, and deeply technical global expert.

Seasoned technology leader with rich experience of leading engineering teams.

Oral and written fluency in English.

Specific Qualifications (if required)

B.E or Equivalent

CCNP (Routing & Switching)