Industrial Network Security Engineer

Within the GIO entity, Operational Technology in the Americas Hub enables efficient management and

control of primary industrial sites by supporting reliable and continued data flow from / to the sites

and securing remote access for the Operations Command Center (OCC) and hundreds of users to the sites.

Services include OCC support, OCC system management, industrial remote system management,

industrial remote access security, industrial onsite firewall, and industrial security monitoring.

Within the Operational Technology Security, the mission of the Industrial Network Security Engineer is to maintain a high level of expertise and performance/availability on security solutions for OCC system management and industrial remote system management. These solutions are primarily based upon Palo Alto firewalls, HP/Aruba switches, BeyondTrust/Bomgar PRA.

The Industrial Network Security Engineer will act as Level 3 for supporting incident/problems processes.

The geographical focus of this role is the Americas Hub however with the ability to foster collaboration with Global Operational Technology teams across the Companies Hubs in order to promote convergence and improvement of standards, processes and best practices.

This position will report to the Operational Technology Director in the Company.

Responsibilities

• Innovation Management and Service strategy contribution
• Have the knowledge of the different technical components of the solutions (from hardware to
• software)
• Set-up & follow the action plan to close & anticipate vulnerabilities
• Understand and document the technical requirements for new services or service enhancements
• Advise on technology decisions & provide service implementation guidelines
• Review & provide input on proposals from an architectural perspective, including feasibility,
• technical viability
• Contribute to realize technical implementation relevant to support the strategy of OT and:
• Roadmap Solution design and implementation
• Assist in designing the overall solution
• Ensure that required capabilities for service development are supported
• Lead effort to implement the solution across the different projects
• Lead effort to test, debug, performance analyze and document components around the domain
• of expertise
• Write technical documentation and procedures
• Operations and delivery
• Administration/management and monitoring of the platforms, conducting daily technical
• administrative work to ensure the availability, stability and security of the platforms
• Support major Operational Technology projects
• Create procedures/scripts on system implementation and backups
• Monitoring logs and alerts of various sites, create automatic reports
• Specify/evaluate system/server requirements
• Adhere to Company ITIL change management process
• L3 Support and problem management
• L3 Troubleshoot, root cause analysis on the major incidents/problems
• Coordinate problem resolution between teams inside and outside of the OT team
• Produces and maintains operational procedures
• Contribute to the problem management and Continuous Improvement processes around the
• specific platforms. This does include strong contributions with knowledge management
• (procedures, knowledge articles, etc, .)
• Overtime may be required to meet project deadlines or to work on Critical Incidents

• Bachelors degree in Computer Science or IT security or other relevant area (or equivalent
• experience)
• CISSP, GRID, GICSP, or similar certifications are a plus

General Requirements

• 5 to 9 years of experience with at least 3 with network security and 2 with Palo Alto firewalls is a “must have”
• Knowledge and know-how specific to the position
• Knowledge on architecture/design/implementation/support of Palo Alto firewalls, HP/Aruba
• switches, Solarwinds, Bomgar/SIRA, DNS, SMTP, Splunk, Active Directory
• Proven experience including hands-on capacity for troubleshoot and monitor with Palo Alto
• firewalls, HP/Aruba switches, Bomgar/SIRA, DNS, SMTP (“must have”)
• Understanding of the generated logs and security architectures
• Good knowledge of standard protocols (SMTP, LDAP, Kerberos, SNMP …)
• Good knowledge of Windows / Linux architectures
• Knowledge of AWS security and/or industrial IT security would be a plus
• Familiarity with fundamental networking/distributed computing environment concepts; ability to
• configure file sharing (NFS/SAMBA or Windows); ability to query DNS records.
• Strong Knowledge of Network Design/Implementation.
• Familiar with principles, practice of system configuration management
• Ability to troubleshoot and support technical issues both remotely and on-site using standard
• tools and techniques (wireshark, nmap, powershell, event logs, netstat, ping, putty, )
• Understanding authentication/authorization processes in use at the site, local and network
• resources and resource sharing
• Ability to design architecture and document procedures
• Good understanding of service management tools for event management, provisioning, and
• monitoring
• Experience with ITSM tool with a preference for Service Now
• Fluency in English is mandatory in a multicultural environment. French or Spanish is a Plus

Critical competencies

• Able to think creatively & exploit opportunities
• A demonstrated ability in successful problem-solving and management of multiple
• tasks/priorities. Ability to effectively manage a crisis situation (technical problem)
• Strong interpersonal and communication skills
• Listening and dialogue to understand needs and problems encountered by users, ability to act as
• a vendor liaison, make presentations to customers or client audiences
• Highly efficient written skills (documenting standards, process and procedure guides, runbooks,
• ability to write purchase justifications, etc, )

Strong Organizational Skills and Standardization

• Technical transition & documentation skills. Qualitative and quantitative analytical skills with
• ability to collect and correlate information and data
• Strong ability to learn; follow instructions well
• Strong ability to work alone (Independent problem-solving, self-direction, autonomy and
• organization in order to better manage its perimeter) as well as on a team

Skills: Administrative Management, Amazon Web Services (AWS), Architectural Design, Architectural Services, Authentication, Best Practices, CISSP - Certified Information Systems Security Professional, Change Management, Communication Skills, Computer Networks, Computer Science, Computer Security, Computer Systems, Configuration Management, Continuous Improvement, Customer Support/Service, DNS (Domain Name System), Debugging Skills, Design Document, Distributed Computing, Documentation, English Language, Event Management, Firewalls, French Language, Hewlett-Packard Product Family, Hubs, IT Service Management (ITSM), ITIL (IT Infrastructure Library), Identify Issues, Industrial Engineering, Industrial Management, Information Technology & Information Systems, International Operations, Interpersonal Skills, Kerberos, Knowledge Management, LDAP (Lightweight Directory Access Protocol), Legal, Linux Operating System, Management Strategy, Microsoft Windows Operating System, Multicultural, NFS (Network File System), Needs Assessment, Network Design, Network Security, Operational Support, Operations Processes, Operations Security (OPSEC), Performance Analysis, Problem Solving Skills, Procedure Development, Process Improvement, Remote Access, Reporting Skills, Root Cause Analysis, SMTP (Simple Mail Transfer Protocol), SNMP (Simple Network Management Protocol), Samba, Scripting (Scripting Languages), Security Architecture, Security Infrastructure, Security Monitoring, Service Delivery, ServiceNow, Spanish Language, Systems Administration/Management, Team Player, Technical Support, Technical Writing, Time Management, Willing to Travel, Writing Skills

The Global Infrastructure & Operation Department (GIO) was created to enable high speed execution of the Groups IT transformation projects and to run global services.

GIO is part of the company IT legal entity. It delivers infrastructure services to our BIS (Business

Information System) customers world wide.

The Americas Hub team within GIO is responsible for ensuring the delivery of all GIO services to its customers across all the Americas (through the 3 Clusters : North America and Latin America and other biz unit) and their respective Entities, encompassing more than 25,000 employees.