Position Purpose
Reporting to the iNet Team Leader, the iNet Engineer is part of the team that is responsible for the technical support of the technologies that sit above the network layer.
The iNet team supports the following technologies:
· Firewall Systems (Checkpoint & Fortinet)
· Global Traffic Managers (F5)
· Load Balancers (F5 & AVI networks)
· SSL Accelerators (F5)
· DNS/DHCP (Infoblox)
· Proxies (SkyHigh Web Gateway & Bluecoat)
· HSM Appliances (Entrust)
Key Responsibilities
The iNet engineer acts as escalation point for technical issues regarding iNet technology platforms and works jointly with other infrastructure teams for delivering projects and implementing required changes in the iNet technology platforms.
The technical environment of this position is as follows. Proven track record in at least two of these is required:
Firewalls:
Advanced knowledge of concepts relating to firewall platforms and related network environments (platform architecture, topologies, protocols..).
Operational experience of Fortinet and Checkpoint technologies appreciated.
Proxies:
Strong familiarity of http and ssl/tls protocols, and mastery of concepts related to proxy technology (functional scope and purpose, traffic intermediation and security stack..).
Operational experience of SkyHigh and Bluecoat technologies appreciated.
Load-balancing:
Strong familiarity of load-balancing concepts (topologies, platform architecture, load-balancing algorithms & parameters..) and DNS/GSLB load-balancing.
Experience with F5 technology appreciated.
DNS/DHCP:
Familiarity of concepts and architectures relating to DNS, DHCP and IPAM.
Operational experience of Infoblox technology appreciated.
Remote access:
Familiarity of concepts and protocols related to end-user VPNs (both IPSEC & SSL).
Operational knowledge of Cisco ASA/FTD platforms appreciated.
Administration:
Operational knowledge of monitoring software (Zabbix/solarwinds/HPOO/Dynatrace..) and protocols (mostly SNMP).
Ability to use, repurpose, troubleshoot and possibly develop administration scripts (python, bash, perl).
Operational experience of Ansible use for automation & deployment.
The key responsibilities for this role are:
· Adapt and maintain standard firewall, load-balancer, proxy and DDI architectures and ensure supporting documentation is accurate.
· Maintain platforms (software and hardware lifecycle management) for all technology described above.
· Identify FW issues related to access policy, NATing rules and routing.
· Troubleshoot issues relating to VPN, both for site to site and user remote access perimeters.
· Support and troubleshoot all requests relative to load-balancing estate, including but not limited to virtual servers management, pools and nodes management, protocol profiles customization.
· Internet access request management including additions to proxy whitelist/blacklists, exception waiver process management and follow up, liaison with proxy SMEs when policy section changes or updates required.
· Troubleshoot all internet access reported incidents.
· Manage all DDI related requests that aren’t service by automatic systems - some DNS record creation/deletion/updates and DHCP management.
· Troubleshoot all DDI related incidents.
· Ensure that all systems are properly monitored, and manage alerts when they happen.
· Ensure that all asset referentials are kept up to date, and manage remediation when reconciliation shows some gaps.
Competencies (Technical / Behavioral)
· 8+ years of hands-on field experience in the iNet technical scope.
· Ability to work efficiently under pressure in high-stress incident situations.
· Availability to work certain shifts (coverage from 8am to 8pm) and occasionally work evenings and/or weekends to deliver activities that would be business disruptive.
About BNP PARIBAS
As the leading European Union bank, and one of the world’s largest financial institutions with an uninterrupted presence in the region since 1860, BNP Paribas offers a wide range of financial services for corporate, institutional and private investors spanning corporate and institutional banking, wealth management, asset management and insurance.
We passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued and encourage applicants of all backgrounds, including diversity of origin, age, gender, sexual orientation, gender identity, religion applicants who may be living with a disability. We have a number of internal employee networks in place to empower our staff to act and challenge the status quo.
• BNP Paribas PRIDE is highly active in favour of the LGBTQIA+ community
• BNP Paribas MixCity which fosters better representation of women at all levels of the organization
• Ability, the mutual aid network for employees with a disability or a disabling or chronic illness
• BNP Paribas CulturAll which celebrates diverse backgrounds
BNP is committed to financing a carbon-neutral economy by 2050. The Group is a founding member of the Net-Zero Banking Alliance and has set up its own Low Carbon Transition Group to support its clients through their energy transitions.
https://careers.apac.bnpparibas/
More information
BNP Paribas - Diversity & Inclusion Journey
BNP Paribas - The Bank Of Green Changes
Award Obtained
BNPP has won Top employer Europe award in a 10th consecutive year
