GSD – IF – NO – Network Operation L2 MY (Network & Security Engineer 1)

Primary Responsibilities:

CIMB GTD requires a Network Security Engineer who is able to design, implement, review, analyse and evaluate any firewalls and network security related solutions whether it is hosted in public or private or hybrid. This information will then be used to author and influence technical designs and specifications which will reduce exposure of CIMB’s business.

The Network Security Engineer will be responsible for the installation, configuration and maintenance of the firewall & network security related infrastructure supporting CIMB. Furthermore, the engineers will be required to perform all firewall day to day operational functions which includes: creation/amendment of firewall rules based on requests, NAT requirements, VPN requirements or any virtual (vsx/vdom) based requirements. The role also demands strong organizational and interpersonal skills and the ability to lead complex technical decision making as well as maintain complex technical documentation.

The Network Security Engineer will analyse, design, implement and maintain the network’s firewall infrastructure. They inspect data packets and TCP, IP flow in network and application flow. The engineer must be an expert in Network Security platforms and must possess a working knowledge of switches, routers and load balancer concepts.

• Network Security Engineer aids in design, build, and manage the network security infrastructure of information technology (IT) systems. This includes (but not limited to) installing hardware (physical & virtual), configuring firewalls, setting up virtual private networks (VPNs), adding upgrades, etc.
• The Network Security Engineer is expected to be proficient in all aspects of ITIL (i.e. Incident Management, Service Request Management, Change Request Management, Problem Management, Disaster Response, etc.).
• Designing Security Systems: Review internal business requirements for network security systems and collaborate with other engineers and developers to decide on an overall technical approach.
• To direct the installation of both the software and hardware components of firewalls along with other portions of security infrastructure.
• To also configure firewalls for usage, manage its day-to-day operations, and perform regular maintenance through upgrades and patches.
• The Network Security Engineer must constantly monitor network security devices and applications for performance problems and provide troubleshooting support for clients. When issues arise, they must analyse the root cause and resolve them promptly or else escalate them to another department while updating clients all throughout.
• To also prepare status reports for internal clients, firewall support engineers write extensive documentation on procedures, device statuses, firewall block lists, and other important technical areas.
• To also create diagrams of network topologies and record details of troubleshooting processes
• Analyse and resolve network security breaches and vulnerability issues in a timely and accurate fashion.
• Conduct user activity audits where required.
• Develop, implement, maintain and oversee enforcement of policies, procedures and associated plans for network and system administration that has been set
• Able to perform implementations or provide necessary details to handover to implementation team as required
• Provides Level 3 support and direction for production related issues. Considered a SME for network security related devices.
• Responsible for documentation of end to end firewall design
• Establishes capacity/threshold management plan and details for Work Load Management
• Works with external vendors for chronic issues, bugs, feature enhancements
• Participates and provide guidance for new feature enhancements, code and certification
• Helps with lifecycle management of network security related products

Read Full Description