Network Security Engineer (INU) Porto

Network Security Engineer (INU)
Porto
Porto, Porto District, Portugal

We are looking for a Network Security Engineer (local contract) to join our BPCE IT business Unit.

Founded in 2015, BPCE Infogérance & Technologies is a subsidiary of Groupe BPCE, dedicated to Infrastructures, End-User Environment, Security and Production. Driven by growth, expertise, transformation and agility, this project embraces an international mindset and a diverse skill set. You’ll find yourself in a dynamic and enriching workplace or, as we like to name it, a real tech playground, where you’ll be able to explore a huge tech stack.

The project consists of carrying out studies and maintaining operational conditions of the Security and Internet architectures of BPCE-IT, called INET architectures, on platforms and technologies related to all connectivity associated to the users (security assets), and taking care of the appliance compliance.

INU oversees all security infrastructures close to the user (VPN SSL, proxy, DHCP/DNS/IPAM). INU is fully responsible for infrastructure: availability, capacity,
-
- date, security, performance, but is not in charge of security analysis and rules. INU operates 3 main technologies: load balancer F5, firewall Fortinet, and proxies Sky
High, and 4 secondary technologies: WAF UBIKA, IPS TRELLIX, access control ISE, VPN ASA Fire
Power.

Our primary mission is to prevent and correct ASAP all outages on production, 24h/24 and 365d/365. So, we have a focus on:

• Prevention and treatments of incidents
• Control and quality of change, which are the main source of incidents.
• Reactivity and rightness of our supervision and alerting system

Our secondary but essential mission is to provide efficient infrastructure and process.

• Help and advise projects and solutions using our infrastructures.
• Draw the technical and capacity roadmap for our technologies.
• Evolve and update our solutions according to roadmap and projects.
• Assume the security of our solutions, analyzing and correcting CVE, contributing to audits.
• Document architecture and operations for better and homogeneous support.
• Industrialize and automate our process and services.

Main Tasks & Responsibilities:

• Supervision and support level 2 to 3 on the security infrastructure, internal and internet.
• Upgrade and deployment of security devices on the network.
• Design of solutions for new technologies or versions, client project and needs, capacity planning, resiliencies.
• Automation of processes and controls on the perimeter.
• Participation in night and weekend operations when needed.
• Be part of the
  - call duty of the service.
• Automatic diagnostic on INE devices for health status during issues with advanced check of systems and specific technology processes.
• Automatic state of INE devices before and after changes.
• Compliance check, based on INE templates, for all INE running devices.

Main Technical Requirements:

• More than 3 years of experience working on security infrastructure solutions (firewalls, DDI, NAC, VPN-SSL).
• Knowledge about Proxy, F5.
• Knowledge about automation / NETOPS (Ansible, Python, Perl).
• Expertise on VPN-SSL and DDI technologies are highly appreciated.
• Have an expert level on at least two of the technologies below:
• Fortinet firewalls
• Palo Alto
• Mc
  Afee proxy (Skyhigh Security)
• Infoblox
• F5 LTM
• Cisco ISE
• Cisco Anyconnect
• Other requirements:
• English level B2
• French B2 is a plus
• Good communication skills
• Good organizational, analytical, and
  - solving skills
• Autonomous, while capable of working within a team
• Fast and adaptable learner.

At Natixis, we are committed to fostering a working environment where each and every one of our people is treated with dignity and respect and where every voice is heard. Our differences make us collectively stronger and are a source of fulfillment, innovation, and performance.