Job TitleWill be responsible for engineering and operations of Perimeter Firewalls, Remote Access VPN, and VPN for iDevices (iVPN). Internet Proxy/Browsing Services, Web Application Firewall Services (WAF), LAN Segmentation Firewalls, Intrusion Detection/Prevention and Third Party Connectivity.Job PurposeKey expertise in VPN technologies, design, management and operations required. Configuration and Operations of all security devices in Network Security domain within DCs, Manufacturing and Office sites globally. Responsible for successful interaction with the internally and externally sourced IT services in the area of Network Security and ensuring they are delivered in accordance with customer Service Level Agreements to Client IT Standards and in line with industry best practice. Responsible for demand & capacity management, configuration-, change-, incident- & problem management, supplier & contract management, benchmarking, etc on managed infrastructure.
Responsible for the implementation of service life cycle management which includes service & technology life cycle management, architecture and innovation in close co-operation with Service Development & Solution Design and IT Strategy & Architecture within Global IT Infrastructure Services (GIS). Supports the development of a commitment based culture and an environment which fosters a high-performance and innovative organization.Major AccountabilitiesTraffic tuning for IPS devices for Branch offices and DC'sDesign and Architecture of Remote Access VPN systems and support processesPolicy tuning of Perimeter and LAN firewallsMonitoring Systems using Orion, and Tufin toolsActive participation on information security planning and countermeasuresMitigation of vulnerabilities reported by vulnerability assessment teamDay to day troubleshooting for network security issuesParticipation and actively working on projects related to network securitySkills3 – 5 years' experience with Juniper and Cisco firewalls 1 – 3 years' experience with Blue Coat Proxies, Tipping Point or comparable IPS solution, Juniper or comparable VPN solution, Network segmentation within manufacturing, lab and R&D environments Experience with Cisco IOS routers and switches Experience and/or Strong understanding of a SIM or SIEM solution Experience and/or Strong understanding of a NAC solution Experience operating in a Qualified and ITIL environment Works independently together with the respective Service Owners and Service managers to establish project budgets and plans. Excellent networking capability across a matrix organization. Proven track record working with multinational teams Expertise in methodologies for project planning and control, requirements analysis, design, implementation and change management. Demonstrated ability in handling complex, technical issues and providing timely solutionsCore CompetenciesResults DrivenCustomer/Quality FocusFast, Action-OrientedOpen CommunicationEducationEssential: Bachelor's degree in math, computer science, electrical engineering or equivalent technical field.
Desirable: Master's degree in math, computer science, electrical engineering or equivalent technical field. Valid & current CCNA+, CCNP, CCDP certifications. Valid & current ISC2, GIAC certificationsExperience6 – 8 years of experience within network and/or security field in a global or regional service portfolio in similar areas as above, across geographies and business areas. More than 3 years of IT experience in relevant technology that includes network design, technical engineering, operational support and hands-on implementation and configuration of network devices such as advance firewalls, Proxy, IPS routers, switches, IPSEC/SSL VPN technology, network analyzers, (sniffers), network and security monitoring tools. Track record in delivering multinational projects on time, quality and budget.
Proven capability and experience in leading direct or indirect reports. Effective relationship management experience.