Network Security Technology Engineer

1. Organisation Unit Purpose (why does the unit exist What are the results the unit is expected to deliver)

The Network Datacenter and Security division is an integral part of this activity and will be responsible to drive the continuous product engineering lifecycle of a defined set of technologies; that will deliver a standard stack of consumable products within Datacenters in the following areas:

Network Security: covering Firewalls Load balancers Proxies IPS and all remaining products that are utilized to secure the network layer.

Network and Voice: covering Data Network Switching & Routing Voice Infrastructure and all telecom links across all locations and Datacenters.

Datacenter: covering all Datacenters server rooms IDFs facilities own or rented by Emirates NBD.

2. Job Purpose (Why does the job exist What is the unique contribution made by the job holder)

The Network Security products act as the main defense line against the growing external threats. The banking sector has been always a preferred target by the outside community; thus requiring an ongoing R&D to develop the necessary controls to mitigate any potential attack.

This role will focus on all Network Security products and will resume the end-to-end responsibility of the platform ownership across the Group. While managing the day-to-day operational activities is not expected here this role will be accountable for the overall platform operational stability and will lead the products engineering strategy and lifecycle. It will be also required to be up to date with the relevant product releases and continuously conduct research and development to carefully select the features that will require to be in the relevant products backlog.

The Role will also play a key role in establishing maintaining and enforcing standards that will ensure all security controls are preserved despite continuous development and changes from the application and development teams allowing agile delivery for all projects.

The Technology Engineer Network Security is an exciting role that requires the candidate to:

• Evaluate implement and support new network security solutions and designs within ENBDs environment (NGFWs IDS/IPS Web Proxy Load balancers RAS DNS Certificates)
• Be accountable for the overall operational stability and lead the products engineering strategy and lifecycle.
• Assist in keen oversight of the performance stability security and operations of the network security solutions engineered by the team.
• Be up to date with the relevant product releases and continuously conduct research and development to carefully select the features that will required to be in the relevant products backlog.
• Ensure the organization is adhering to Security best practices and principles.
• Drive technical projects and take ownership and responsibility for the overall planning execution and success of complex initiatives.
• Participate and partner with architecture and Information Security in the design and implementation of the network security strategy including cloud enablement and establishing next generation firewall and load balancer features and capabilities.
• Collaborate with Information Security and infrastructure teams to develop scalable and resilient solutions.
• Participate in the design lifecycle management and total cost of ownership of security devices applications and infrastructure services.
• Assist with on-call escalation and Level 3 support as needed.
• Influence standards and platforms for future application development.
• Mentor junior team members in the network security team.

3. Job Content (Describe the key results delivered by the job holder how they are measured and the tasks performed to achieve the results)

Key Results

Performance Measures

Main Tasks

Standardized stack of network security products across the Emirates NBD environment that should meet the different workload requirements.

Percentage of Compliance with Group IT Technology Stack. Reduction of Non-Standardized products in the environment.

• Establish a standard set of network security products that caters for different workloads at all layers (Virtualization Containers public cloud)
• Continuous update of the Group IT product catalogue with the approved stack.
• Enforce a standard build and housekeeping checklists: this will simplify the environment and drive cost down.
• Drive projects to move the non-compliant products into the standard stack.

Lower the product TCO by driving efficiency and looking for innovative alternatives.

Annual decrease in the product TCO.

• Continuous R&D and vendor engagement.
• Automate the installation to achieve Zero touch unattended deployment.
• Review all housekeeping activities and identify key processes that should be automated.

Operational Stability

Annual reduction of business impacting incidents

• Design solutions that cater for enhancing the operational stability.
• Address Problem tickets Risk and Audit items in the products backlog.

5. Internal / External Relationships and Committee Memberships (Internal relationships cover other units within the organization; External relationships relate customers government bodies suppliers etc; Committees include formal forums where membership is nominated)

Interface (Int/Ext)

Reason

Interface (Int/Ext)

Reason

Infrastructure

Work with the wider infrastructure team to ensure consistency of the deliverables.

Application

Share standards and collaborate on enhancing application and different platform performance

Architecture

Align with Architecture standards and collaborate on different design forums

Audit & Risk

Discuss and agree on items that need to be addressed and update the relevant teams on progress.

Security

Align with Security standards and collaborate on different design forums

6. Problems & Decisions ( State problems solved and decisions made on a regular basis by the job holder and the desired outcomes of actions)

Problems and Decision

Desired Outcome

Non-Standardized Stack of product

Establish an updated stack of standard products

High TCO of the products

Look for alternative and automate where applicable

Products Strategy are not well defined

Drive Product Roadmaps and backlog

8. Person Specifications (required to carry out the job not what the current or recommended incumbent possesses)

Specifications

Description of Knowledge / Skill etc.

Desirable or Essential

Education

• General
• Professional

Bachelor of Computer Science or Equivalent

Relevant Certification

Essential

Desirable

Experiences

(Years & Type)

Industry

5 years of experience at a relevant technical position in large organization

Banking background

Essential

Desirable

Knowledge & Skills

• Technical

• Excellent knowledge of Network Security Principles
• Experience designing implementing and operating large scale corporate network security solutions including NGFWs IDS/IPS Web Proxy Load balancers RAS DNS Certificates
• Excellent technical knowledge in FW Products: PaloAlto Checkpoint
• Excellent technical knowledge in F5 Products: GTM LTM and ASM
• Excellent knowledge in multiple Network security products: Bluecoat Pulse Secure
• Knowledge in opensource network security solutions: HAProxy Service Mesh PFSense Squid
• (Very Important) Automation and Software experience Ansible Python Chef
• Experience with cloud network security solutions
• Good knowledge in virtualization technologies: Docker OpenShift Kubernetes VMWare ESXi KVM OpenStack
• Good knowledge of the products licensing

Behavioral Competencies

• Strategic Thinking with Research and Development mindset.
• adequate understanding of project management methodologies.
• Excellent communication skills (verbal written and presentation).

SYNECHRONS DIVERSITY & INCLUSION STATEMENT

Diversity & Inclusion are fundamental to our culture and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity Equity and Inclusion (DEI) initiative Same Difference is committed to fostering an inclusive culture promoting equality diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger successful businesses as a global company. We encourage applicants from across diverse backgrounds race ethnicities religion age marital status gender sexual orientations or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements mentoring internal mobility learning and development programs and more.

All employment decisions at Synechron are based on business needs job requirements and individual qualifications without regard to the applicants gender gender identity sexual orientation race ethnicity disabled or veteran status or any other characteristic protected by law.

Candidate Application Notice