Senior Network & Security Automation Engineer

Voor KPN is Berkhof Enterprises op zoek naar een Senior Network & Security Automation Engineer. The Networks & Datacenter (NW&DC) organization within Platform & Technology (P&T) forms the foundation of ABN AMRO's IT landscape. We provide secure, scalable and resilient infrastructure services that support thousands of applications, users and business-critical processes.

As cyber threats increasingly hide within encrypted traffic, ABN AMRO is improving network security inspection. You will play a key role in designing, implementing and operating next-generation network security solutions while helping the organization move towards highly automated and policy-driven security services.

Verantwoordelijkheden & Kernactiviteiten

• Be responsible for the implementation, integration and operational support of security platforms that protect ABN AMRO against advanced cyber threats.
• Work within a team of highly skilled engineers responsible for TLS/SSL Traffic Inspection solutions.
• Work within a team of highly skilled engineers responsible for Advanced Threat Protection implementation.
• Work within a team of highly skilled engineers responsible for Network security architecture and engineering.
• Work within a team of highly skilled engineers responsible for Security automation and Infrastructure as Code.
• Work within a team of highly skilled engineers responsible for Secure access and traffic governance.
• Work within a team of highly skilled engineers responsible for Operational support and continuous improvement.
• Act as a subject matter expert and hands-on engineer, bridging architecture, engineering, operations and security processes.
• Design, implement and optimize TLS/SSL traffic inspection solutions.
• Deploy and manage Advanced Threat Protection capabilities to identify malicious encrypted traffic.
• Engineer and maintain enterprise-scale security environments.
• Support secure network segmentation and security policy enforcement.
• Perform troubleshooting, root cause analysis and lifecycle management of security platforms.
• Participate in security incident investigations and remediation activities.
• Configure and manage Palo Alto Next Generation Firewalls.
• Configure and manage Palo Alto Panorama.
• Configure and manage F5 BIG-IP platforms.
• Configure and manage Cisco networking and security technologies.
• Maintain secure and highly available network security services.
• Implement changes in accordance with security and operational governance processes.
• Develop automation solutions using Python.
• Develop automation solutions using Ansible.
• Develop automation solutions using REST APIs.
• Develop automation solutions using Git.
• Develop automation solutions using YAML.
• Develop automation solutions using Infrastructure as Code principles.
• Automate security policy deployment and compliance validation.
• Contribute to CI/CD integrations for network and security services.
• Develop reporting, monitoring and operational dashboards.
• Support security audits, compliance activities and control validation.
• Contribute to implementation of security standards and best practices.
• Ensure solutions comply with regulatory requirements including DORA and internal security policies.
• Improve operational processes through automation and standardization.

Functie-eisen

• You are an experienced hands-on engineer with a passion for security engineering, automation and protecting critical banking infrastructure.
• 5+ years of experience as a Network Security Engineer or Security Engineer.
• Proven hands-on experience with Palo Alto Networks NGFW.
• Proven hands-on experience with Palo Alto Panorama.
• Proven hands-on experience with F5 BIG-IP.
• Proven hands-on experience with Cisco networking infrastructure.
• Experience implementing TLS/SSL inspection solutions.
• Experience with Advanced Threat Protection technologies.
• Strong understanding of Network security architectures.
• Strong understanding of Routing and switching.
• Strong understanding of Load balancing.

… lees de volledige omschrijving bij Berkhof Enterprises.