Business Function:
The Senior Network Security Engineer (iNet Technology team) provides technical support for all abovethenetworklayer solutions, including firewalls (CheckPoint, Fortinet), global traffic managers and load balancers (F5, AVI), SSL accelerators (F5), DNS/DHCP (Infoblox), web proxies (Skyhigh, Blue Coat) and HSM appliances (Entrust).
Position Purpose:
The Senior Network Security Engineer is the escalation point for incidents and changes affecting the iNet technology stack. The role collaborates with crossfunctional infrastructure teams to ensure reliable operation, continuous improvement and successful delivery of projects on the above platforms.
Job Responsibilities:
- Maintain and update firewall, loadbalancer, proxy and DDI designs.
- Ensure all supporting documentation reflects the current environment.
- Perform hardware & software upgrades, patching and endoflife migrations for all iNet technologies.
- Diagnose and resolve accesspolicy, NAT and routing issues.
- Manage VPN (sitetosite and remoteuser) troubleshooting.
- Administer virtual servers, pools, nodes and protocolprofile customisations.
- Support capacityplanning and performance tuning.
- Process internetaccess requests (whitelists/blacklists, exception waivers).
- Coordinate with proxy SMEs on policy changes and incident resolution.
- Handle manual DNS record changes and DHCP scope adjustments not covered by automated tools.
- Resolve DDIrelated incidents.
- Verify that all platforms are covered by monitoring (Zabbix, SolarWinds, Dynatrace, etc.).
- Respond to alerts, perform rootcause analysis and drive remediation.
- Keep the asset register current; reconcile discrepancies and drive corrective actions.
- Develop/maintain scripts (Python, Bash, Perl) for routine administration.
- Use Ansible for configuration automation and deployment.
Qualifications Technical Competencies and Experience:
- Bachelor's degree in Computer Science, Information Technology, Engineering or related field (or equivalent experience).
- Minimum 3 years of handson experience managing firewalls, loadbalancers, proxies or DDI solutions in a largescale enterprise environment.
- Proven track record of incident escalation, problem resolution and participation in infrastructure projects.
- Deep understanding of firewall architectures, topologies and protocols.
- Handson experience with Fortinet and Check Point (preferred).
- Operational experience with Skyhigh and Blue Coat (preferred).
- Experience with F5 platforms (preferred).
- Experience with Infoblox (preferred).
- Exposure to Cisco ASA/FTD (preferred).
- Strong grasp of HTTP, SSL/TLS and proxy traffic flows.
- Familiarity with loadbalancing concepts, algorithms and GSLB.
- Knowledge of DNS, DHCP, IP address management concepts.
- Understanding of IPsec and SSL VPN protocols.
- Working knowledge of monitoring tools (Zabbix, SolarWinds, Dynatrace, etc.) and SNMP.
- Ability to write and maintain automation scripts; Ansible experience valued.
About BNP Paribas Solutions - Philippines Branch
Established in 2024,BNP Paribas Solutions Philippines Branch is a branch of BNP Paribas Group, a leading bank in Europe with an international reach. We provide support services, back-office operations services related to or which further the accomplishment of the corporation's investment services, banking transaction processing, and equity investment.
