Network Security Engineer

Teh Ford Extranet Engineering team is responsible for developing and designing firewall and other solutions deployed within the Extranet space. These technologies include: firewalls (physical and virtual), virtual hosting systems, VPN solutions, management tools, remote access solutions and other security solutions.

As part of the engineering team, you will assist in reviewing, testing and deploying new technologies for introduction to the Ford network, such as new firewall models or cloud services.  Activities include:

• Technology research
• Product comparison, evaluation, testing and recommendations
• Ongoing testing and code evaluation
• Deployment and ongoing support

Extranet Engineering team manages the Employee Remote Access service.  This is a global service providing remote work capabilities to 100,000+ staff.

Other key activities include:

• Consulting services for customers seeking assistance when standard solutions do not suffice
• Troubleshooting (3rd/4th level technical support to other Extranet teams).

The Extranet Engineer will work on key initiatives that 1) help modernize the Ford network and 2) ensure a smooth transition from preset to future state.

Remote Access 
- modernize existing employee VPN/connectivity solutions
- understand and become expert in next gen SSE (secure service edge) and SASE (secure access service edge) solutions to improve remote access security, capacity and performance
- Research, test, Pilot and deploy to production new connectivity solutions
- Manage and maintain existing VPN/Connectivity solutions to meet operational targets
- provide third level support to Ford Operations teams 

Firewalls
- Manage and maintain firewall standards: code levels and device models
- Manage and maintain firewall management tools: testing of new software versions, product life cycle management, upgrades and troubleshooting
- select, test and certify new firewall code for general deployment in the Ford network
- support Planning teams in new firewall deployments

Vendor Management
- work directly with Extranet vendors (Cisco, Palo Alto, etc.) on problem resolution, product road maps, and requirements gathering to improve services in the Ford network

Manage technologies within the Extranet Portfolio
- Palo Alto Firewalls
- Palo Alto Prisma Access / Strata Cloud Manager
- Cisco Firewalls
- Network Hub-Extranet Routing/Switching

Extranet Lab
- Maintain a lab for testing and troubleshooting of Extranet solutions

Consulting
- Work with internal and external customers to find solutions to non-standard Extranet requirements
 

The successful candidate will have:

7+ years in Network Security/Firewall responsibilities

Palo Alto Networks:

• Firewalls: 3400, 5200, 5400 series
  • setup, configuration, troubleshooting, management, upgrades
• Panorama
• Prisma Access / Strata Cloud Manager
  • configuration, scripting, management, troubleshooting, policy creation/management

Cisco Systems:

• Firewalls: Firepower 2100, 3100, 4100, 9300 series appliances; Meraki mx67, mx68 appliances; ASA and FTD deployments
  • setup, configuration, troubleshooting, management, upgrades
• Cisco Security Manager, Firepower Management Center, Meraki Administrative Console  
  • setup, configuration, troubleshooting, management, upgrades
• Router/Switch: ISR 1100, ASR100x, Nexus 9300, 9500
  • setup, configuration, troubleshooting, management, upgrades

IPSec VPN - setup, configuration, troubleshooting, management

Automation/Scripting skills and experience

Ability to work independently with a diverse population, both in skill set, management level and geographic location. 

This position requires frequent visits to the Network Test lab in the Dearborn, Mi area. Applicants must be local to southeast Michigan

As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including:

• Immediate medical, dental, and prescription drug coverage

• Flexible family care, parental leave, new parent ramp-up programs, subsidized back-up child care and more

• Vehicle discount program for employees and family members, and management leases

• Tuition assistance

• Established and active employee resource groups

• Paid time off for individual and team community service

• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day

• Paid time off and the option to purchase additional vacation time.

For a detailed look at our benefits, click here: Benefit Summary 

This position is a salary grade 8. 

This position is a range of salary grades 8.

* Please note: This is a hybrid role, you are expected to relocate if you are not within commutable distance, and responsible to be on site at minimum 1-3 day per week *

This position requires frequent visits to the Network Test lab in the Dearborn, Mi area. 
 

*Visa Sponsorship is not provided for this role*

Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.

We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, If you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.
 

#LI-Hybrid

#LI-GH2