Senior Network Security Engineer [T500-19491]

About Deutsche Börse Group:

Deutsche Börse Group

Senior Network Security Engineer

Division / Section:

DBAG, CIO, CTO, Chief Cloud Officer / Core Infrastructure, Networks, Data Center & Virtualization (Section)

Field of activity:

The Chief Technology Officer (CTO) area is at the heart of the Information Technology division of Deutsche Börse Group. The CTO area develops and operates the group-wide IT infrastructure (network, data centers and Cloud), the Group Data & Advanced Analytics and the Enterprise Architecture, and therefore significantly contributes to Deutsche Börse Group overall IT strategy. The CTO area drives digital transformation and leverages innovation while keeping production operations stable.

Within the CTO Area, the Cloud / Core Infrastructure department enables the usage of public cloud services from Microsoft and Google and provides core infrastructure services such as data center management and non-trading network operations. The department develops and maintains cloud platforms for GCP and Azure, which allows the other IT departments (Product ITs) to make use of cloud in a safe and efficient manner.

You will drive the transformation of modern technologies and infrastructure in a highly regulated capital markets environment; advance innovation and contribute to Deutsche Börse Group’s overall strategy.

Your tasks and responsibilities:

• Deploy, maintain, and operate the network security infrastructure devices in strict adherence with the defined procedures with the aim of highest operational stability.
• Execute, maintain and improve the operational processes and activities, deliver according to the highest quality and standards, ensuring high service delivery levels, compliance and customer satisfaction.
• Conduct incident investigation, communication and resolution.
• Perform out of business hours support activities and participate to on-call rotation.
• Create, maintain and report KPIs.
• Support internal and external audits activities, as well as resolution of findings.
• Strictly adhere to corporate processes, standards, policies and operational procedures.
• Investigate and implement operations automation where relevant.

Required qualifications and skills:

• BE / B.Tech / Any Master's Degree
• Excellent knowledge of the following solutions and technologies: Cisco ASA/FTD and / or Check Point next-gen firewalls (including IDS / IPS and other features) – mandatory.
• A plus would be knowledge of the additional technologies: F5 LTM & AWAF, BlueCoat Web Proxies, Infoblox DNS & DHCP, Radware DDoS.
• Knowledge and expertise managing network security for cloud platforms – particularly GCP & Azure would be also a plus, including automation skills (e.g. Ansible, Terraform).
• Strong expertise in Information Technology, specifically with network and connectivity security in a hybrid cloud network environment.
• Very strong customer-oriented mindset and attitude, experience in interacting with both internal and external customers.
• Previous experience at least 3 years in a similar role operating a complex and highly critical network security infrastructure.
• Very good analytical skills and structured thinking.
• Very well organized, autonomous, committed to quality, high sense of responsibility and ownership.
• Full proficiency in written and spoken English.