Job Description

Job Category: Enterprise Technology
Degree Level: Bachelor's Degree or equivalent
:
As Network Security Engineering Enterprise Architect (GSR8), based in India you will be a technical lead supporting Ford's complete Enterprise Network & Security architecture transformation. You will be taking care of dynamics for Network Security Engineering Products (Security Firewalls, Proxy, ISE, SDN Networks, Wireless) team to a center of technical excellence and customer Advocacy. You identify, analyze, and resolve existing network security design weaknesses and vulnerabilities which could possess risk to existing infrastructure. Expert in closing zero-day security vulnerabilities taking along all infrastructure domain teams which could impact Ford's reputation across globe. AS Network Security Engineering enterprise architect, you would lead future network security product development by contributing to the network Design (architecture)and Automation used across multiple Engineering Branches, Data Centers, Manufacturing Plants and Remote users. This Role requires defining road map for ZTNA/SASE deployment using Prisma Access/Cloud, setup support model, automation to accelerate end user experience. The Global Network Security Engineering enterprise architect is responsible for successful setup of the products by working closely with Software developers from Ford and OEMs in consultation with Fords Network and Security Operations Team. This position will be part of Ford's Enterprise Tech department and will report to the Regional Network Delivery Manager, based in same or another region. The lead needs to ensure "Always On" (24 x 7) availability of Ford Global Network Product offerings, working with Network & Security Peers from other regions.
Responsibilities:
This role will also be driving towards supporting full observability and Monitoring, process response, and technical capability to ensure customer up time of 99.999%+. This position requires a wide range of skills and experience,

• This role involves collaborating closely with the network operations team to identify continuous improvement opportunities and working with the network engineering team and OEMs to devise and implement solutions. The implementation will be driven through automation in partnership with Ford's developers.

• Design and implement robust security architectures and frameworks to protect against threats and vulnerabilities.
• Ensure timely proactive identification and reporting of security gaps and vulnerabilities to the critical business information, systems and network infrastructure.
• Plan for End-to-end Network & Security projects implementation.
• Support the Major technical Incident Management Calls and Change Controls through STRONG Technical Network Knowledge, Operational capability, and strong communication skills.
• Perform configuration updates, such as modifying configurations, signature definitions or implementing new policies on various network security tools, as directed.
• Demonstrate technical excellence through technical knowledge.
• Collaborate with global leaders to support 24/7 network availability on a worldwide scale.
• Advocate and ensure that high quality Follow the Sun (FTS) is delivered to receiving teams. As well as support on-call schedule and shifts are available.
• Support continuous improvement in service management for Network Services leveraging enterprise tools and processes (Incident, Problem &Change) and focusing on customer value optimization.
• Supports implement best practices and processes for Network & Security Operations services to maintain availability, reliability, scalability, and security.
• Support for effective SRE Monitoring and FSO (Full Stack Observability) on system performance and overall health, troubleshoot issues, and implement corrective actions.
• Collaborate with the Network LAN/WAN & security Engineering/development teams to optimize infrastructure for application performance and scalability.
• Support team members to achieve technical network excellence thru experience, and network Certifications and support training requirements.
• Able to support the team to develop continued improvements leading to an "always on network capability.
• Be able to leverage other network management tools used by the NOC in the identification and response to security connectivity incidents and faults.
• Develop security policies, standards, and procedures.
• Assist with security compliance audits to verify completeness of required configurations and verify system hardening.
• Participate in the problem investigation connectivity incidents related to security devices, provide recommendations to improve reliability and availability, or reduce recovery time.
• Support assurance of up-to-date SW releases, targeted LDOS, and PSIRTS (security updates).
• Serve as an escalation point for security incidents and service requests.
• Design, deploy, and maintain robust DNS, DHCP, and IPAM solutions.
• Proactively monitor and troubleshoot DNS, DHCP, and IPAM issues using TCP Wave.
• Configure DNS and DHCP servers for optimal performance and reliability.

Qualifications:

• Technical Expertise: In-depth knowledge of Palo Alto Prisma Access, Cisco Umbrella, IPS, and ZTNA.
• Specialized Skills: Advanced understanding of F5 Load Balancers, including automation capabilities.
• Networking Knowledge: Proficient in routing and switching protocols, wireless technology, data center operations, WAN/SD-WAN/SDN, and network monitoring and observability tools.
• Firewall and Analysis Tools: Experience with Cisco firewalls, Viavi Observer, and Wireshark for packet analysis.
• End User Security: Familiarity with end-user security strategies, including host-based firewalls, transparent proxies, and Network Access Control (NAC).
• Wireless Security: Expertise in implementing wireless security within an enterprise environment.
• Educational Background: bachelor's degree in computer science, Engineering (Science/Electronic & Communication/Electrical and Electronic Engineering), or a related field.
• Project Leadership: Experience leading or participating in enhancement projects for on-premises proxies like Cisco WSA, and potential Cloud Proxy migration efforts.
• Customer Advocacy: Solid understanding of customer care business processes and procedures, with the ability to represent and advocate for the end customer.
• Scripting and Deployment: Ability to engineer and deploy updates to support changes in PAC files using JavaScript.
• F5 Load Balancer Knowledge: Proficiency in creating VIPs, SSL Offloading, and developing iRules for automation based on project requirements.
• Troubleshooting Skills: Strong experience in troubleshooting network environments and understanding network troubleshooting tools.
• Networking Services: Significant technical, functional, and hands-on experience with networking services and operations.
• Collaboration and Influence: Highly collaborative with the ability to influence team members and provide strong viewpoints as needed.
• Engineering Experience: Minimum of 3 years of experience engineering Cisco IOS-based firewalls/VPNs in production environments.
• Network Security Experience: At least 6 years in network security engineering roles within medium to large-scale enterprises and a total of 12 years of enterprise IT experience.

Nice to have Qualifications/Skills & Expertise

• Ability to develop and deliver detailed issue summary and concise messages to supervisor / Management (+LL6)
• Possess a high tolerance for ambiguity and ever-changing dynamic environment.
• Security Certification such as PCNSE (Palo Alto Networks Certified Network Security Engineer), Prisma SDWAN, ZTNA, Zscaler Proxy.
• Network Certifications such as CCNP (Cisco Certified Network Professional) or CCIE (Cisco Certified Internetwork Expert)
• Experience working on collaborating with multiple stake holders till closer of projects.
• Advocate for DevOps mindset and culture, collaboration, flexibility, and cross domain knowledge
• Endless Desire to Learn.
• Working experience in supporting network operations and monitoring center.
• Strong technical experience in Routing / Switching/ Wireless/Load Balancers/ Cisco ACI & SDWAN
• Strong troubleshooting skills in LAN, Wireless and WAN environments involving Cisco devices.
• Good Communication, Business Development & Negotiation skills
• Work with external Vendors like Cisco/F5,Palo Alto or WAN service providers to POC for upcoming technologies as per Ford requirements.

Skills Required