Senior Network Security Engineer Manager Level

About BNP Paribas Solutions - Philippines Branch

Established in 2024, BNP Paribas Solutions Philippines Branch is a branch of BNP Paribas Group, a leading bank in Europe with an international reach. We provide support services, back-office operations services related to or which further the accomplishment of the corporation’s investment services, banking transaction processing, and equity investment.

About Business Line/Function

iNet team that is responsible for the technical support of the technologies that sit above the network layer. It supports The iNet team supports technologies such, but not limited to: Firewall Systems (Checkpoint & Fortinet), Global Traffic Managers (F5), Load Balancers (F5 & AVI networks), SSL Accelerators (F5), DNS/DHCP (Infoblox), Proxies (SkyHigh Web Gateway & Bluecoat), HSM Appliances (Entrust)

Position Purpose

The iNet engineer acts as escalation point for technical issues regarding iNet technology platforms and works jointly with other infrastructure teams for delivering projects and implementing required changes in the iNet technology platforms.

Responsibilities

• Adapt and maintain standard firewall, load-balancer, proxy and DDI architectures and ensure supporting documentation is accurate.
• Maintain platforms (software and hardware lifecycle management) for all technology described above.
• Identify FW issues related to access policy, NATing rules and routing.
• Troubleshoot issues relating to VPN, both for site to site and user remote access perimeters.
• Support and troubleshoot all requests relative to load-balancing estate, including but not limited to virtual server management, pools and nodes management, protocol profiles customization.
• Internet access request management including additions to proxy whitelist/blacklists, exception waiver process management and follow up, liaison with proxy SMEs when policy section changes or updates required.
• Troubleshoot all internet access reported incidents.
• Manage all DDI related requests that aren’t service by automatic systems - some DNS record creation/deletion/updates and DHCP management.
• Troubleshoot all DDI related incidents.
• Ensure that all systems are properly monitored and manage alerts when they happen.
• Ensure that all asset referentials are kept up to date, and manage remediation when reconciliation shows some gaps.
  
  

• Advanced knowledge of concepts relating to firewall platforms and related network environments (platform architecture, topologies, protocols..).
• Operational experience of Fortinet and Checkpoint technologies appreciated.
  
  

• Strong familiarity of http and ssl/tls protocols, and mastery of concepts related to proxy technology (functional scope and purpose, traffic intermediation and security stack..).
• Operational experience of SkyHigh and Bluecoat technologies appreciated.
  
  

• Strong familiarity of load-balancing concepts (topologies, platform architecture, load-balancing algorithms & parameters..) and DNS/GSLB load-balancing.
• Experience with F5 technology appreciated.
  
  

• Familiarity of concepts and architectures relating to DNS, DHCP and IPAM.
• Operational experience of Infoblox technology appreciated.
  
  

• Familiarity of concepts and protocols related to end-user VPNs (both IPSEC & SSL).
• Operational knowledge of Cisco ASA/FTD platforms appreciated.
  
  

• Operational knowledge of monitoring software (Zabbix/solarwinds/HPOO/Dynatrace..) and protocols (mostly SNMP).
• Ability to use, repurpose, troubleshoot and possibly develop administration scripts (python, bash, perl).
• Operational experience of Ansible use for automation & deployment.