Compliance Officer in Coventry

Role: Network Security Architect | Helsinki, Finland

Job Description for Network Security

Client can provide a superior foundation for building a professional career – a place for people to learn, to achieve and grow.

A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture.

• Candidate Persona
• Ability to work with very large and complex environment.
• Self‑motivated individual and creative thinker who will take ownership of tasks and projects, able to work with the team, and manages tasks effectively and has a proven track record of consistent and organized outputs.
• The ideal candidate will demonstrate an eagerness to understand complex problems and requirements, an aptitude for translating these problems into workable designs and solutions and will possess a keen eye for detail.
• Security Architect
• The Security Architect would be a member of the Security team.

This is a lead technical resource for in‑depth security device incident analysis and change management for our customers.

The Security Architect will develop an understanding of the specifics of the Customer's security architecture and will be serving as an escalation point to our Customers.

Security Architects are experts in their fields, whether designing, planning or assisting in critical change management or incident.

Responsibilities

• Knowledge and experience in installing and supporting Palo Alto Security Appliances-firewall and Panorama (minimum Seven years)
• Palo Alto Networks Certified Network Security Engineer (PCNSE) certification preferred.
• Good understanding of routing protocols their configuration & troubleshooting – BGP, OSPF, EIGRP & Static
• Thorough knowledge of Panorama, threat/risk management, Global Protect VPN/IPSEC VPN troubleshooting, and other Palo Alto features including SSL, TLS, DTLS, PEAP, MSCHAPv2, encryption/decryption etc.
• Deep understanding of network security systems, security profiles such as intrusion prevention/detection systems/Antivirus/Antispyware/Url filtering/EDL configurations and protocols including ACE, ACS, VPN, GRE, IPSEC, IKE, TACACS, RADIUS, ACLs, 802.1x, audits, log files, etc.
• A high level of Palo Alto expertise in design, implementation, configuration, migration, HA
• Active/Passive and Active/Active Concept, Natting, troubleshooting and customization as per requirement
• Deploy Core Components, Features and integration/configuration of Firewalls Using Panorama
• Good understanding on networking topologies and protocols. Examples – Trunks, VLANs, Port‑Channel, STP, MPLS, VRF, SIP, Traffic Shaping / Qo S.
• Good hands‑on experience with Cisco and Palo Alto advanced troubleshooting.
• Indepth knowledge of configuring and managing Panorama templates and device groups.
• Hands on Experience on Managing, Operating and Troubleshooting in critical and complex environment
• Experience in Runbook, SOP's, KB articles preparation
• Familiarisation with Data Centre environment and hosted/cloud deployments
• Experience of supporting clients remotely, along with experience of working with ISP
• Good knowledge on log and packet capture/packet analyses using Wireshark or other protocol analysers.
• Excellent communication/E‑Mail skills – both written and verbal
• Must be flexible to work outside of business hours as per business requirements
• Needs to be able to remain calm under pressure and ensure a logical thought process is maintained.
• Familiarisation of DNS and DHCP and Microsoft AD infrastructure
• Strong analytical skills for interpreting business requirements and translating them into technical specifications and Data Sheets
• Additional Experience
• Experience with Flowchart and design tools like MS Visio for network diagrams, HLD, LLD.

Candidates should have very good hands‑on experience on Zscaler Private Access (ZPA) with excellent communication skills.

• Should have experience in designing, implementing, and troubleshooting ZPA globally.
• Experience deploying, maintaining or troubleshooting networking, firewall and security solutions in enterprise environments is important.
• Should be able to develop test plans, implementation plans, and project timelines for project.
• Should have capabilities in troubleshooting the ZPA related issues and provide the RCA.
• Good knowledge of IPSEC, GRE, HTTP/HTTPS, DNS protocols.
• Industry certifications such as ZCCP‑IA and PA, Cisco, Juniper, Palo preferred.
• Hands‑on knowledge with network troubleshooting using tools such as Wireshark, tcpdump, Traceroute, and MTR.
• Experience with Zscaler solutions – ZIA, ZPA.
• Working knowledge of networking and security products from various vendors and enterprise network infrastructure.
• Ability to navigate technical and architectural discussions with customers, partners including audience from business and technical fraternity.
• Excellent communication and follow‑up skills across internal and external organizations with proactive approach.
• Effectively handle multiple projects and work calmly under pressure.
• Working knowledge of authentication systems such as SAML, LDAP and MS Active Directory.
• Knowledge of solutions built on Microsoft Azure, Amazon Web Services and other leading cloud platforms.
• Good knowledge of Hypervisors: VMware, Hyper‑V, and KVM.
• Good knowledge on HTTP, HTTPS, SSL Inspection, DNS.
• Experience with Proxy and SSL.
• Additional Tools
• Having good experience of Clear Pass.
• Having good experience in FTD.
• Having Good experience in Aruba central.
• Having knowledge of PKI.

Skills Required (8 – 12 Years of experience in Network Security)

• Skill Required – Palo Alto, Checkpoint, CISCO, Zscaler, Aruba.
• #J-18808-Ljbffr