OT Network and Security Architect

Reporting to the Industrial IT Manager and functionally linked to the Head of Security Design and Network Security Operations will be in charge of handling end to end technical aspects of LAN,WAN and Network Security for Alstom Digital Services Organization. The Technical expert will be the sole responsible person to handle and end to end network design issues and to come up with any enhancement at the right time to provide excellent service to Business. The Ideal candidate will be responsible for resolving all critical technical issues within Alstom network ecosystem.

Key Responsibilities & Accountabilities:

• Network Design and Architecture:
  • Developing comprehensive network architecture plans for LANs, WANs, SDWAN, Zero Trust Access(ZTNA), and other network components, considering scalability and future needs.
  • Selecting appropriate network hardware and software, including routers, switches, firewalls, and intrusion detection/prevention systems.
  • Designing network segmentation and access control mechanisms to mitigate security risks.
  • Focus on Secure network architectures and supporting technology solutions within the enterprise
• Security Policy Development:
  • Defining and implementing robust security policies and procedures for network access, data encryption, user authentication, and incident response.
  • Establishing security baselines and standards for network devices and configurations

• Security Solution Implementation:
  • Deploying and configuring security technologies like firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and data loss prevention (DLP) solutions
  • Implementing encryption standards for data at rest and in transit
• Compliance Management:
  • Ensuring network infrastructure adheres to relevant industry regulations and compliance requirements (e.g., GDPR, HIPAA, PCI DSS)
• Implementation and Maintenance:

• Deployment and configuration:

Oversee the installation, configuration, and testing of network infrastructure and security devices according to established standards.

• Performance monitoring:

Monitor network performance metrics, identify bottlenecks, and implement optimizations to ensure network stability and availability.

• Collaboration and Communication:

• Cross-functional collaboration:

Work closely with IT teams including system administrators, security analysts, application developers, and business stakeholders to ensure alignment with security requirements.

• Incident response:

Lead incident response activities in case of network security breaches, coordinating with relevant teams to contain and mitigate damage.

• Security awareness training:
• Contribute to security awareness programs by educating users about network security best practices and potential threats
• Maintain an awareness of business, technical, architecture, infrastructure, and end user support issues and act as sounding board to aid in the development of creative solutions
• Provides clear oral and written communication of change activity and outage events to peers and senior leadership within the organization.
• Develop and maintain measurable health and performance metrics; Assess performance to ensure that it meets the present and future needs of the business.
• Responsible to liaison with Business and other key stakeholders to assess the business and identify key challenges, constraints, and risks and thereby define the project scope after extensive due diligence.
• Prepare dashboards to communicate the progress regarding scope, schedules, and cost to all stakeholders.
• Responsible for developing and maintaining knowledge management portal using MS Share Point.
• Participate in operations meeting & track action items to ensure key deliverables is met.
• Monitoring missed SLA and daily monitoring of critical issues and escalating to management, when it exceeds the threshold.
• Manage escalations of critical technology issues impacting business and customer facing systems with appropriate root cause analysis documentation.
• Participate with Operations Teams, in reviewing and challenging ongoing service and commercial performance from service partners through regular reviews and unlock additional value creation at an operational/tactical level.

PROFILE :

• To be considered for this role, candidate need to demonstrate the following skills experience and attributes:
• Bachelors/Masters degree in Engineering/Technology or related field
• Expertise in network protocols (TCP/IP, routing protocols, MPLS)
• Deep understanding of network security concepts (firewalls, VPNs, intrusion detection/prevention systems, access control lists)
• Familiarity with network automation tools and scripting languages (e.g., Python, Ansible)
• Knowledge of cloud network security architectures (AWS, Azure, GCP)
• Minimum 10 years of relevant IT experience
• Strong network analysis and troubleshooting skills.
• Should be able to work independently on all critical technical aspects in LAN/WAN technology
• Professional industry standard certifications like CCNA/NP/IP/IE etc.will be an added advantage
• Understanding of Leased-lines,SDWAN,VPN,ZTNA, Zscaler MPLS,QOS,Optimization and high Availability.
• Experience in an operational role working directly with internal and external customers, trouble ticketing systems, and incident management
• Must understand and have worked in an operational environment such as a NOC or IT for 6+years
• Good Understanding of Disaster Recovery planning, Resiliance and High availability features.

Problem solving, analytical skills and decision making

Ability to communicate technical concepts in business terms Initiative in finding ways to get things done better

Independently resolves complex issues/problems, seeking advice as appropriate.

Demonstrates both strong analytic and big picture capabilities in problem solving approaches

Communication, leadership, interpersonal and teaming skill

Strong oral and written communication skills

Strong listening, feedback, negotiation and conflict resolution skills

Ability to build trust and work collaboratively

Effectively communicate at the business stakeholder, process and technical levels

High level of initiative, self-motivation, resourcefulness, collaboration and patience

Builds strong networks within and across functions / geography

Ability to influence others without direct authority

Able to provide leadership and instill a level of confidence in team members and key stakeholders

Displays consideration and respect for others

Facilitates effective team interaction

Acknowledges and appreciates each team member's contributions

Manages stakeholder expectations effectively

Work management, organization and planning

Able to translate large, complex issues/objectives into effective requirements

Focuses on the most critical issues that have the highest impact on the organization and business needs

Works effectively with ambiguity / fluctuating priorities and constraints

Able to manage multiple initiatives with short and long term priorities

Able and willing to be hands on and get involved in detail if necessary

Customer and Business focus

Strong orientation towards internal customers

Ability to successfully implement change through relationships built on a local, regional and global level

Values and Ethics

Self-motivated, self-guided and results-oriented

Ability to maintain a high level of confidentiality

Treats all others with respect; generates trust and performs role with highest level of integrity

Seeks to exceed expectations and acts on feedback.