Manager - Extranet Network Security

Extranet DevSecOPs Lead  role is based out of India and contours of deliverables are detailed below. 

1.Lead transformation of enterprise connectivity for connectivity across large manufacturing plants, business offices, engineering centers, parts depots, datacenters. Role requires deep understanding and intimate familiarity on multitude of niche & emerging technologies as Secure Access Services Edge, Cloud hosted Collaboration services. 

2. Lead will be responsible for defining the adoption strategy, business impact analysis, user adoption journey. Hands on knowledge on emerging technologies as SASE, SDWAN, Zero Trust Networks, Multi Cloud security will be key differentiator.  Lead will also work to expose design weaknesses, vulnerabilities working in tandem with other infrastructure domains as Collaboration Services, Cloud Services, Data Centre Hosting, Database and Storage, Application Support, Tooling and Monitoring. 

3. Lead will also be responsible for code certification and testing pre deployment, handle deployment issues in production and responsible for final tier escalation working with OEM Engineering. 

4. Lead will partner with suppliers to design framework & prototype of IOT based solutions for improving Monitoring and observability  

5. Role will be responsible for defining roadmap around advanced observability related to above workstreams, lead team of developers to develop solutions that will align to SRE principles for delivering on stability goals through automation. Expectations from the role include need to identify opportunities for process optimization, tech debt remediation, cost spillage that will help achieve MTTX goals for EPEO. 

6. Individual will be responsible for operationalizing AIOPS framework and drive continuous improvements working closely with SRE and Incident response, Monitoring teams. 

7. Work as a global leader on planning execution of unit level transformation initiatives & collaborate with global unit and cross domain peers to deliver on objectives of Zero Trust Framework Creation and Adoption, Self-healing networks, Secure and Resilient services. Work to define process flows, user journeys securing business along with improvement in response times. 

8. Front end internal and external audits that come up from time to time. Support analysis of LDOS, PSIRTS and develop remediation strategy, business plan for funding and oversee end to end execution. 

This role will also be driving towards supporting full observability and Monitoring, process response, and technical capability to ensure customer up time of 99.999%+. This position requires a wide range of skills and experience,

•   This role involves collaborating closely with the network operations team to identify continuous improvement opportunities and working with the network engineering team and OEMs to devise and implement solutions. The implementation will be driven through automation in partnership with Ford's developers.

• Design and implement robust security architectures and frameworks to protect against threats and vulnerabilities.
• Ensure timely proactive identification and reporting of security gaps and vulnerabilities to the critical business information, systems and network infrastructure.
• Plan for End-to-end Network & Security projects implementation.
• Support the Major technical Incident Management Calls and Change Controls through STRONG Technical Network Knowledge, Operational capability, and strong communication skills.
• Perform configuration updates, such as modifying configurations, signature definitions or implementing new policies on various network security tools, as directed.
• Demonstrate technical excellence through technical knowledge.
• Collaborate with global leaders to support 24/7 network availability on a worldwide scale.
• Advocate and ensure that high quality Follow the Sun (FTS) is delivered to receiving teams.  As well as support on-call schedule and shifts are available.
• Support continuous improvement in service management for Network Services leveraging enterprise tools and processes (Incident, Problem &Change) and focusing on customer value optimization.
• Supports implement best practices and processes for Network & Security Operations services to maintain availability, reliability, scalability, and security. 
• Support for effective SRE Monitoring and FSO (Full Stack Observability) on system performance and overall health, troubleshoot issues, and implement corrective actions. 
• Collaborate with the Network LAN/WAN & security Engineering/development teams to optimize infrastructure for application performance and scalability.
• Support team members to achieve technical network excellence thru experience, and network Certifications and support training requirements.
• Able to support the team to develop continued improvements leading to an “always on network capability. 
• Be able to leverage other network management tools used by the NOC in the identification and response to security connectivity incidents and faults.
• Develop security policies, standards, and procedures.
• Assist with security compliance audits to verify completeness of required configurations and verify system hardening.
• Participate in the problem investigation connectivity incidents related to security devices, provide recommendations to improve reliability and availability, or reduce recovery time.
• Support assurance of up-to-date SW releases, targeted LDOS, and PSIRTS (security updates).
• Serve as an escalation point for security incidents and service requests.

Basic Qualifications

• Technical Expertise: In-depth knowledge of Palo Alto Prisma Access, Cisco Umbrella, IPS, and ZTNA.
• Specialized Skills: Advanced understanding of F5 Load Balancers, including automation capabilities.
• Networking Knowledge: Proficient in routing and switching protocols, wireless technology, data center operations, WAN/SD-WAN/SDN, and network monitoring and observability tools.
• Firewall and Analysis Tools: Experience with Cisco firewalls, Viavi Observer, and Wireshark for packet analysis.
• End User Security: Familiarity with end-user security strategies, including host-based firewalls, transparent proxies, and Network Access Control (NAC).
• Wireless Security: Expertise in implementing wireless security within an enterprise environment.
• Educational Background: bachelor’s degree in computer science, Engineering (Science/Electronic & Communication/Electrical and Electronic Engineering), or a related field.
• Project Leadership: Experience leading or participating in enhancement projects for on-premises proxies like Cisco WSA, and potential Cloud Proxy migration efforts.
• Customer Advocacy: Solid understanding of customer care business processes and procedures, with the ability to represent and advocate for the end customer.
• Scripting and Deployment: Ability to engineer and deploy updates to support changes in PAC files using JavaScript.
• F5 Load Balancer Knowledge: Proficiency in creating VIPs, SSL Offloading, and developing iRules for automation based on project requirements.
• Troubleshooting Skills: Strong experience in troubleshooting network environments and understanding network troubleshooting tools.
• Networking Services: Significant technical, functional, and hands-on experience with networking services and operations.
• Collaboration and Influence: Highly collaborative with the ability to influence team members and provide strong viewpoints as needed.
• Engineering Experience: Minimum of 3 years of experience engineering Cisco IOS-based firewalls/VPNs in production environments.
• Network Security Experience: At least 6 years in network security engineering roles within medium to large-scale enterprises and a total of 12 years of enterprise IT experience.

Nice to have Qualifications/Skills & Expertise

• Ability to develop and deliver detailed issue summary and concise messages to supervisor / Management 
• Possess a high tolerance for ambiguity and ever-changing dynamic environment.
• Security Certification such as PCNSE (Palo Alto Networks Certified Network Security Engineer), Prisma SDWAN, ZTNA, Zscaler Proxy.
• Network Certifications such as CCNP (Cisco Certified Network Professional) or CCIE (Cisco Certified Internetwork Expert)
• Experience working on collaborating with multiple stake holders till closer of projects.
• Advocate for DevOps mindset and culture, collaboration, flexibility, and cross domain knowledge
• Endless Desire to Learn. 
• Working experience in supporting network operations and monitoring center.
• Strong technical experience in Routing / Switching/ Wireless/Load Balancers/ Cisco ACI & SDWAN
• Strong troubleshooting skills in LAN, Wireless and WAN environments involving Cisco devices.
• Good Communication, Business Development & Negotiation skills
• Work with external Vendors like Cisco/F5,Palo Alto or WAN service providers to POC for upcoming technologies as per Ford requirements. 
• Experience with Rally tools and Agile delivery.
• Good to have Experience with Cisco DNA, SD-Access, ISE, Wireshark, Gigamon, Splunk and Thousand Eyes(Zscaler),Network automation Scripts
• Good to have Experience with Project Leadership: Experience with project managing large roll outs.
•  Security Planning and engineering
• Ansible, Python, Shell Scripting, Golang