Infrastructure Projects Delivery Unit is responsible for design and deployment security solutions protecting and managing the client network. An L3 resource is expected to function as the highest level of technical support and escalation for security related issues, incidents and initiatives. The person should be able to take the role of Subject Matter Expert in technical project deliverables and be responsible for end-to-end solution implementation. Network Security engineer should have sufficient networking experience to tightly cooperate with communications network team engineers to deliver the solutions on a wide scale covering all the networking aspects.
Due-diligence of existing client’s solution, analyzing physical topology, logical interconnectivity, service dependency, application flows and security constraints.
Attending meetings and workshops with the client to understand requirements, challenges and risks.
Successfully presenting and backing complex designs for critical infrastructure to senior client resources at formal review boards
Developing security solution in cooperation with Network and Application projects team for solid end-to-end secure communication using existing industry standards, best practices and know-hows fitting it into existing infrastructure and operations framework.
Creating designs and support documentation for the delivered infrastructure. Raising change records and executing activity while adhering to client’s processes and procedures.
Support and trouble-shooting of network security devices and systems delivered by the project to the client during transition/handover period. That includes firewalls, intrusion detection systems, virtual private networks (VPN), security device management platforms, etc.
Vulnerability management, platform selection, software production-feature set and load- testing for chosen platform.
Have 1+ year(s) of infrastructure security experience working with major firewall platforms (Palo Alto, Juniper, Cisco, Fortinet, etc.). Certificate for any of the platform is a plus.
Alternatively have 1+ year(s) experience in Data Centre Security and micro-segmentation (zero-trust model and core segmentation, NSX, ACI, Tetration, etc.)
Alternatively have 1+ year experience with Cloud Security platforms – either cloud edge IaaS firewall or Cloud SaaS solution (Cisco CSR/vMX, Cisco AMP/SIG, CheckPoint, zScaler, PRISMA, etc.)
Have a good knowledge of networking – either classic (switching, dynamic routing protocols, static and rule-based routing, etc.) or cloud (VPC, peering, gateways, SD-WAN secure fabric). Certificate in any networking area is a plus.
Have a good knowledge of encryption and tunneling protocols (PKI, IPSec, SSL VPN, TLS, IKE, IKEv2, etc.)
Understand application protocols in context of OSI network layers and content inspection (Load-balancing, WAF, IPS, IDS, etc.)
Understand cloud technologies and infrastructure virtualization (IaaS, PaaS, SaaS, NFV, SDN, SD-WAN)
Understand baseline security requirements and platform hardening principles.
Be flexible for international business trips to attend client meetings or workshops or perform remote site installation and configuration.
Have good verbal communication skills (English) in both technical and non-technical communications.
Have good experience creating design documents (HLD, LLD) diagrams (Visio) and presentations (PPT)
Have good analytical mindset for problem solving under stress and time pressure.
Training package on various technologies (e.g. SDN, Cisco, Fortinet, VMware, different Cloud platforms, etc.) and possibility to gain a certification
International teams and multilingual environment
Access to the latest high-tech solutions and opportunity to specialize in other technologies
Ability to learn from the best IT experts on the market
Home working possibility (after passing probation period)
Equal Employment Opportunity Statement
All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.
Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.
Accenture is committed to providing veteran employment opportunities to our service men and women.
USA TX - Irving
Advanced Application Engineer Olympus Program - 3822943
Posted 1 day ago
USA NC - Charlotte
Application Monitoring Expert - 3827936
Posted 3 days ago
USA TX - Irving
Test Automation Engineer - 3822888
Posted 4 days ago
Life at Accenture
Work where you're inspired to explore your passions and where your talents are nurtured and cultivated. Innovate with leading-edge technologies on some of the coolest projects you can imagine.
Learn more about Accenture
Our more than 500,000 people in more than 120 countries, combine unmatched experience and specialized skills across more than 40 industries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities.