SENIOR NETWORK SECURITY ENGINEER | JOHANNESBURG R900,000 CTC PER ANNUM Our client is a leading full-service commercial Bank, is looking for a Senior Network Security Engineer to join their team. The company operates across ten African countries, the UAE and UK, with representative offices in China, India and Lebanon. Theyre evolving to redefine the power of relationship. JOB MISSION: The Network Security Engineer is responsible for effective provisioning, installation/configuration, operation, and maintenance and monitoring of network infrastructure. This individual participates in technical research and development to enable continuing innovation within the infrastructure. This individual ensures that system hardware, operating systems, software systems, and related procedures adhere to organizational standards and change and release policy. REPORTS TO: Manager: IT Systems YOUR DAY TO DAY Support and maintain Access Bank SA network switching environment: Recommend changes to improve systems and network configurations and determine hardware or software requirements related to such changes Support and maintain network users: To provide third line assistance to all our users with any logged IT related incident. To take ownership of issues by carrying out problem analysis to implement temporary or permanent fixes with the aim of restoring service to the customer as soon as possible; escalating incidents to other support teams where necessary To accurately record, update and document requests using the IT service desk system Support and maintain the network from layer 1 to layer 5: Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary Develop and maintain installation and configuration procedures Maintain data center environmental and monitoring equipment Support, monitor and maintain Access Bank SA IT security: Ensure that the bank is making full use of all WAN links at all times, perform network failovers twice a year for compliance and that network uptime is upheld with the highest quality Perform regular security monitoring to identify any possible intrusions Vendor Management: Monthly vendor score card reviews with vendors Business Planning and Decision Making: Provides input for short-term and long-term operational planning in respect of existing and emerging technology Policies and Procedures: ISMS security Policies and procedures Network/firewall redundancy and DR testing Patch/security update as per agreed business OLA Network access/control as per agreed business OLA Daily/Weekly and Monthly Reporting Logging and resolving Helpdesk calls as per agreed business OLA Network Performance monitoring and fine tuning Licensing management Contacts and Business Relationships: Internal: All departments External: Syrex Intelys African Datacenters and Teraco BankServ Alliance Partners ISPs IMPACT ON BUSINESS RESULTS: This Role has direct impact on business results as failure to comply with industry standard SLAs could result in reputational risk as well as financial risk FIGURES AFFECTED BY THE ROLE (KPIS): Qualitative IT SLA IT Security breaches (refers to ISMS) MINIMUM ROLE REQUIREMENTS: Degree or technical diploma in Computer Science Hands-on experience with Cisco devices and Fortigate supporting firewall, IPS, IPSEC, VPN, WAF, reverse proxy and load balancing CCNP (Routing and witching) certification and other relevant networking vendor certification Over 5 years experience in network and security management and support thereof Minimum of 3 years network security infrastructure experience Experience in SD-WAN/SDN is an advantage SKILLS/ SPECIALIZED KNOW HOW: Install, Setup, Configure and Support of the following solutions: Implementing multiple layer 3 protocols, especially OSPF and BGP Working knowledge of other protocols: TCP/IP, SNMP, DNS, DHCP, QoS, VLANs, VPNs, and DHCP Implementation of security standards across client network Manage client LAN and WAN infrastructure environment Supporting Network Hardware: Cisco routers, multi-vendor routers, switches and firewalls; and related operating systems Designing and deploying security solutions for Network Access Control Manage and support client Firewalls, IDS/IPS, WAF, Proxies, DLP and Malware inspections solutions Network Operating Systems including Cisco IOS and Switches and other multivendor Network OS
