Company Description
Job Description
We are looking for a Network Security Engineer (local contract) to join our BPCE IT business Unit.
Founded in 2015, BPCE Infogérance & Technologies is a subsidiary of Groupe BPCE, dedicated to Infrastructures, End-User Environment, Security and Production. Driven by growth, expertise, transformation and agility, this project embraces an international mindset and a diverse skill set. You'll find yourself in a dynamic and enriching workplace or, as we like to name it, a real tech playground, where you'll be able to explore a huge tech stack.
The project consists of carrying out studies and maintaining operational conditions of the Security and Internet architectures of BPCE-IT, called INET architectures, on platforms and technologies related to all connectivity associated to the users (security assets), and taking care of the appliance compliance.
INU oversees all security infrastructures close to the user (VPN SSL, proxy, DHCP/DNS/IPAM).
INU is fully responsible for infrastructure: availability, capacity, up-to-date, security, performance, but is not in charge of security analysis and rules.
INU operates 3 main technologies: load balancer F5, firewall Fortinet, and proxies SkyHigh,
and 4 secondary technologies: WAF UBIKA, IPS TRELLIX, access control ISE, VPN ASA FirePower.
Our primary mission is to prevent and correct ASAP all outages on production, 24h/24 and 365d/365.
So, we have a focus on
Prevention and treatments of incidents
Control and quality of change, which are the main source of incident.
Reactivity and rightness of our supervision and alerting system
Our secondary but essential mission is to provide efficient infrastructure and process.
Help and advise projects and solutions using our infrastructures.
Draw the technical and capacity Roadmap for our technologies.
Evolve and update our solutions according to roadmap and projects.
Assume the security of our solutions, analyzing and correcting CVE, contributing to audits.
Document architecture and operations for a better and homogenous support.
Industrialize and automatize our process and services.
Main Tasks & Responsibilities:
Supervision and support level 2 to 3 on the security infrastructure, internal and internet.
Upgrade and deployment of security devices on the network.
Design of solutions for new technologies or versions, client project and needs, capacity planning, resiliencies.
Automation of processes and controls on the perimeter.
Participation in night and weekend operations when needed.
Be part of the on-call duty of the service.
Automatic diagnostic on INE devices for health status during issues with advanced check of systems and specific technology processes.
Automatic state of INE devices before and after changes.
Compliance check, based on INE templates, for all INE running devices.
Qualifications
Main Technical Requirements:
More than 3 years of experience working on security infrastructure solutions (firewalls, DDI, NAC, VPN-SSL).
Knowledge about Proxy, F5.
Knowledge about automation / NETOPS (Ansible, Python, Perl).
Expertise on VPN-SSL and DDI technologies are highly appreciated.
Have an expert level on at least two of the technologies below: Fortinet firewalls
Palo Alto
McAfee proxy (Skyhigh Security)
Infoblox
F5 LTM
Cisco ISE
Cisco Anyconnect
Other requirements:
English level B2
French B2 is a plus
Good communication skills
Good organizational, analytical, and problem-solving skills
Autonomous, while capable of working within a team
Fast and adaptable learner.
Additional Information
At Natixis, we are committed to fostering a working environment where each and every one of our people is treated with dignity and respect and where every voice is heard. Our differences make us collectively stronger and are a source of fulfillment, innovation, and performance.
Candidate's Journey
Following your online application, you'll be contacted by one of our Talent Acquisition Specialists. The next steps would be to meet our business experts (Team Leaders and Team Managers), welcome and onboard you into the Team.
Few other things you should know:
This career opportunity is based in Porto, right in the heart of the city, and offers a hybrid working model.
#J-18808-Ljbffr