Description

Key Responsibilities:

• Manage and fulfil network security service requests across firewall, proxy, and malware/content filtering platforms, including maintaining queue health and data quality standards.
• Analyze incoming requests to understand business and technical requirements, prioritize delivery dates, and schedule/execute changes within approved change windows.
• Assist in translating business requirements into technical designs aligned with enterprise architecture, security baselines, and policy standards to ensure successful production implementation.
• Create, modify, and implement firewall rules, NAT rules, object groups, proxy policies, malware/content filtering configurations, and related network security changes.
• Perform design validation, peer reviews, and pre-work/testing in non-production environments, when necessary, prior to production deployment.
• Represent and facilitate requests through Enterprise Change Management processes and ensure adherence to bank standards, guidelines, and SLAs.
• Support incident resolution and service restoration through appropriate configuration changes in coordination with internal teams, customers, suppliers, and vendors.
• Collaborate with architecture, engineering, network operations, and clients on design requirements, standards, impact assessments, and production support transitions.
• Act as a consultant and subject matter expert for network security technologies and contribute feedback to architecture and engineering strategy discussions.
• Contribute to automation, templates, playbooks, and continuous improvement initiatives that drive implementation efficiency and operational consistency.
• 5-10 years of experience in Network Services, Network Security, Infrastructure Engineering, or related technical disciplines.
• Hands-on experience with firewall technologies such as Fortinet and Check Point.
• Experience directly managing Web Content Filtering/Proxy infrastructure in forward and reverse proxy configurations.
• Experience supporting network security technologies such as firewalls, content inspection, malware inspection, and related platforms.
• Ability to add, modify, and delete firewall rules, NAT rules, and object groups.
• Advanced experience managing, configuring, and troubleshooting content inspection / delivery technologies such as Radware, Alteon, FireEye, or similar.
• Knowledge of authentication and directory protocols such as Kerberos, LDAP, IWA, IWA-direct, SSO, and Active Directory.
• Strong understanding of network-based technologies and protocols, including LAN, WAN, routing, and switching fundamentals.
• Excellent customer-facing communication skills, including the ability to interact with stakeholders at all levels and effectively manage expectations and escalations.
• Strong analytical, troubleshooting, and problem-solving skills with the ability to translate business requirements into business-aligned technical solutions.
• Ability to manage short- and long-term engagements with multiple project tracks and teams in parallel.
• Firm understanding of IT Service Management, including Request, Incident, Change, and Problem Management; familiarity with ITIL and Agile practices.
• Leadership qualities including self-starter mindset, ownership, accountability, organization, and attention to detail.
• Industry certifications such as Fortinet NSE (1-8), Check Point CCTA/CCTE/CCSA/CCSE, Cisco CCNA/CCNP/CCIE, or equivalent experience.
• Professional certifications in network security or web content filtering technologies such as CISSP, CCSP, CEH, BCCPA, BCCPP, or similar.
• Experience with Bluecoat Management Center, ProxySG, BCAAA, McAfee Web Gateway, McAfee DLP, Netskope, F5 SSLO, or similar technologies.
• Skills in scripting and automation, including Python, Ansible, PowerShell, REST/SOAP, Expect, or Rancid.
• Experience working in Agile environments and in networking-related disciplines within design, implementation, or operations roles.
• Experience within financial services or other highly regulated enterprise environments.
• Familiarity with additional technologies such as Splunk, ECSL, WAN, MAN, LAN, Optical, Proxy/Threat Prevention, DDI, Load Balancing, and AAA.
• ITIL certification preferred

Key Skills

Education

Bachelor's degree