Requirements: English
Company: BNP Paribas
Region: Madrid , Community of Madrid
GROUP BNP PARIBAS
The BNP Paribas Group is one of the largest international banking networks, with a presence in 72 countries. The organization is an international financial services group, with more than 200,000 employees with solid roots in Europe.
The BNP Paribas Group is organized around two main activities: Retail Banking and Corporate & Institutional Banking (CIB).
The IT production has two main entities ITG Production and ITO, with a main governance lead by ITGP.
ITG Production Network Security provide securely some critical services and maintain them constantly in other to offer best possible user experience and accompany the business growth.
The services concerned are Remote Access, Connectivity to Cloud Services (SAAS, IAAS, PAAS), Firewalls and IPS segmentation & filtering and Automation solutions.
The Network Security teams are responsible for designing, deploying, and supporting these services for all IT Group users (~100 000). They are performing that according to the Group guidelines and standards (Security, compliance, features, infrastructures, )
ABOUT THE JOB
MISSION
The successful candidate will include Network and Security teams and will collaborate with them and other teams in IT Group by designing, building and providing level 3 support on security services and components such as firewalls/IPS and VPN concentrators while respecting processes and focusing on customer needs or issues.
RESPONSIBILITIES
Architecture and Infrastructure management
- Study projects need and propose security solution to answer business need
- Build new infrastructure which comply our standard
- Study product evolution and optimisation to improve our service quality
- Manage product roadmap to prevent any risk on the production
Incident handling in Service support
- Prioritize, schedule, troubleshoot and resolve incoming support requests
- Perform, when required, appropriate ticket escalation
- Follow and monitor the progress of incidents until they are resolved and closed
- Keep regular and clear communication about incident status
- Create, and maintain a knowledge base with appropriate solutions
- Implement documented instructions and recommendation
- Identify opportunities for improvement and make constructive suggestions to be more proactive
Customer Request handling
- Be sensitive to customer needs and provide him with advice
- Understand request processes, workflows, and service catalogues
- Qualify and handle customer requests according to the Service Level Agreements
- Provide technical support and improve the user experience
Asset Management and monitoring
- Participate to asset upgrade and migration campaigns
- Participate to asset security patching campaigns and compliance remediation actions plans
- Participate to business continuity exercises to ensure resilience of services and infrastructures
- Perform daily health checks of services and infrastructure based on performance indicators
- Perform monthly IT operational permanent control to ensure stability and enhance reliability
REQUIREMENTS
Required:
- Study and Design security components to comply with security standard
- Understand service and component resiliency
- Firewalls vendor : Fortinet, Palo Alto Network and Check Point including the management console (FortiManager, Panorama, Multi-Domain Security Management)
- Remote access on VPN SSL concentrators: Cisco ASA (Adaptive Security Appliance) and Cisco Secure Client
- Intrusion Prevention/Detection System and Network Detection and Response
- Change, incident, problem management according to ITIL standards
- ServiceNow ticketing et request solution
- Ability to draw infrastructure scheme
- Write architecture and production documents (HLD, LLD)
- Tests equipment to validate new feature or product evolution.
- Monitoring and alerting: Zabbix, Grafana, Dynatrace syslog,
- Reporting, logging and SIEM
- Troubleshooting (PCAP analysis)
Nice to have:
- Understand Browsing and Hosting infrastructures components, behaviours & protocols.
- SDWAN architecture & SASE network evolution
- Public and Private Cloud infrastructure
- Ansible development skills
- Create insightful dashboard on Elastic Search
Languages
- Fluency in English
- French is a plus
SKILLS