Network Security Engineer

Global Supplier Connectivity team delivers secure connectivity services with Suppliers and Trade Partners. These solutions include firewalls (physical and virtual), virtual hosting systems, VPN solutions, management tools, security, and remote access solutions (Zscaler & Prisma). The team is responsible for creating, maintaining, and auditing the security of connections and accesses to internal resources of our Company.  

The position will be integrated in a team with members in Valencia (Spain), Chennai (India) and Dearborn (USA). 

Job responsibilities could include but are not restricted to:

• Delivery of global connectivity and security services for Suppliers worldwide to meet service SLAs:
  • Work with internal key stakeholders to understand their requirements for suppliers’ connectivity. 
  • Translate the business requirements into solutions that support access to internal resources and advice on best alternatives.
  • Liaise with various third-party teams (e.g., supplier network team, ISPs, application and service owners, cyber security) who provide components of the solutions. 
  • Design and Implement solutions. 
  • Implement solutions to log, monitor and alert different service solutions.
  • Develop and Maintain Service Metrics and required actions to improve quality.
• Security Audits and Compliance: Lead regular security audits to ensure compliance with industry standards and internal security policies:
  • Develop and enforce policy frameworks for least privilege access, micro-segmentation (as needed), ZTNA, and continuous monitoring.
  • Conduct regular firewall rule reviews, optimizations, and updates to ensure maximum efficiency and security.
  • Interface with Cyber Security response teams as and when required.
• Lead Scripting/Automation initiatives in order to foster team efficiency and quality.
• Coordinate Networks Extranet Projects within the team.
• Lead and coordinate all personnel under his/her supervision.
• Provide 3rd level technical support. Collaborate with the incident response or threat analysis team to analyze and mitigate connectivity and security incidents. 

REQUIRED EDUCATION:

• Bachelor´s Degree in Networks or Computer Science.
• High Proficient in English language (at least C1 level).
• Strong analytical, problem solving, and organization skills.
• Good written and verbal communication skills. 
• Excellent leadership and interpersonal skills based on Ford+ Behaviors.
• Demonstrated conflict management skills.

DESIRED EXPERIENCE / TECHNICAL SKILL: 

Candidates should have:

• Experience operating and troubleshooting TCP/IP and Ethernet-based networks in enterprise network environments, including knowledge of IP protocols. Solid experience with Cisco / Palo Alto technology, including routing, switching & security.    
• Experience in Firewall systems administration and operation, preferably Cisco ASA / Firepower platforms, using Cisco Service Manager (CSM), Firepower Management Console (FMC), or Palo Alto Strata Cloud Manager.
• IPSec VPN - setup, configuration, troubleshooting, management.
• Automation/Scripting skills and experience.
• Working knowledge and understanding of API management tools.
• Moderate to advanced knowledge of coding, network automation, orchestration, virtualization, and/or Security.
• Hands-on experience with Data Network Security, Segmentation, and Zero Trust Network Access – ZTNA. 
• Strong attention to detail and interpersonal skills.
• Strong ability to manage multiple issues at once.
• Ability to apply critical thinking to function effectively in ambiguous circumstances. 
• Ability to work independently, with minimal supervision, and with a diverse population, both in skill set, management level, and geographic location.
• Ability to collaborate with cross-functional teams, including system administrators, network engineers, and cybersecurity experts.