Network Security Engineer

About BNP Paribas Group:

BNP Paribas Group is a leading European bank with a strong global footprint across 72 markets and more than 202,000 employees. The Group provides corporates, institutional and private investors with product and service solutions tailored to their specific needs. It offers a wide range of financial services covering corporate & institutional banking, wealth management, asset management, insurance, as well as retail banking and consumer financing through strategic partnerships.

About BNP Paribas Solutions Philippines Branch:

Established in 2024, BNP Paribas Solutions Philippines Branch is a branch of BNP Paribas Group, a leading bank in Europe with an international reach. We provide support services, back-office operations services related to or which further the accomplishment of the corporation's investment services, banking transaction processing, and equity investment.

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

About Business line/Function:

iNet team that is responsible for the technical support of the technologies that sit above the network layer. It supports TheiNet team supports technologies such, but not limited to: Firewall Systems (Checkpoint & Fortinet), Global Traffic Managers (F5), Load Balancers (F5 & AVI networks), SSL Accelerators (F5), DNS/DHCP (Infoblox), Proxies (SkyHigh Web Gateway & Bluecoat), HSM Appliances (Entrust)

Job Title:

Network Security Engineer

Date:

March 2026

Department:

APAC IT Production - Telecom & DC - iNet

Location:

Taguig City, Philippines

Business Line / Function:

APAC IT Production

Reports to:

(Direct)

Team Leader, APAC IT Production - Telecom & DC - iNet

Grade:

(if applicable)

Manager

(Functional)

Number of Direct Reports:

N/A

Directorship / Registration:

N/A

Position Purpose

The iNet engineer acts as escalation point for technical issues regarding iNet technology platforms and works jointly with other infrastructure teams for delivering projects and implementing required changes in the iNet technology platforms.

Responsibilities

Direct Responsibilities

• Adapt and maintain standard firewall, load-balancer, proxy and DDI architectures and ensure supporting documentation is accurate.
• Maintain platforms (software and hardware lifecycle management) for all technology described above.
• Identify FW issues related to access policy, NATing rules and routing.
• Troubleshoot issues relating to VPN, both for site to site and user remote access perimeters.
• Support and troubleshoot all requests relative to load-balancing estate, including but not limited to virtual server management, pools and nodes management, protocol profiles customization.
• Internet access request management including additions to proxy whitelist/blacklists, exception waiver process management and follow up, liaison with proxy SMEs when policy section changes or updates required.
• Troubleshoot all internet access reported incidents.
• Manage all DDI related requests that aren't service by automatic systems -some DNS record creation/deletion/updates and DHCP management.
• Troubleshoot all DDI related incidents.
• Ensure that all systems are properly monitored and manage alerts when they happen.
• Ensure that all asset referentials are kept up to date, and manage remediation when reconciliation shows some gaps.

Contributing Responsibilities

• Increasing productivity of team and company by striving for excellence.
• Motivating self and the team to take on new tasks.
• Challenge existing process for continuous improvements.

Technical & Behavioral Competencies

Must have

The technical environment of this position is as follows. Proven track record in at least two of these is required:

Firewalls:

• Advanced knowledge of concepts relating to firewall platforms and related network environments (platform architecture, topologies, protocols..).
• Operational experience of Fortinet and Checkpoint technologies appreciated.

Proxies:

• Strong familiarity of http and ssl/tls protocols, and mastery of concepts related to proxy technology (functional scope and purpose, traffic intermediation and security stack..).
• Operational experience of SkyHigh and Bluecoat technologies appreciated.

Load-balancing:

• Strong familiarity of load-balancing concepts (topologies, platform architecture, load-balancing algorithms & parameters..) and DNS/GSLB load-balancing.
• Experience with F5 technology appreciated.

DNS/DHCP:

• Familiarity of concepts and architectures relating to DNS, DHCP and IPAM.
• Operational experience of Infoblox technology appreciated.

Remote access:

• Familiarity of concepts and protocols related to end-user VPNs (both IPSEC & SSL).
• Operational knowledge of Cisco ASA/FTD platforms appreciated.

Administration:

• Operational knowledge of monitoring software (Zabbix/solarwinds/HPOO/Dynatrace..) and protocols (mostly SNMP).
• Ability to use, repurpose, troubleshoot and possibly develop administration scripts (python, bash, perl).
• Operational experience of Ansible use for automation & deployment.

Other/Specific Qualifications (if required)