Senior Network Security Engineer

Business Function:

The Senior Network Security Engineer (iNet Technology team) provides technical support for all “above‑the‑network‑layer” solutions, including firewalls (Check‑Point, Fortinet), global traffic managers and load balancers (F5, AVI), SSL accelerators (F5), DNS/DHCP (Infoblox), web proxies (Skyhigh, Blue Coat) and HSM appliances (Entrust).

Position Purpose:

Role Summary:

The iNet Engineer is the escalation point for technical issues concerning iNet technology platforms and works collaboratively with other infrastructure teams to deliver projects and implement changes. The role supports the iNet team, which is responsible for the technical support of technologies that sit above the network layer (firewalls, load balancers, DNS/DHCP, proxies, HSM appliances, etc.).

The iNet team maintains and supports the following technologies;

• Firewall systems – Check Point & Fortinet
• Global Traffic Managers – F5
• Load balancers – F5 & AVI Networks
• SSL accelerators – F5
• DNS/DHCP – Infoblox
• Proxies – Skyhigh Web Gateway & Blue Coat
• HSM appliances – Entrust

Job Responsibilities

• Design, adapt, and maintain standard firewall, load‑balancer, proxy, and DDI architectures; keep all supporting documentation up to date.
• Manage platform lifecycles (software and hardware) for the technologies listed above.
• Identify and resolve firewall issues related to access policies, NAT rules, and routing.
• Troubleshoot VPN problems for site‑to‑site and remote‑user connections.
• Support and resolve all load‑balancing requests, including virtual‑server, pool, node management, and protocol‑profile customisation.
• Process internet‑access requests (proxy whitelist/blacklist additions, exception‑waiver handling) and liaise with proxy SMEs for policy updates.
• Diagnose and remediate internet‑access incidents.
• Handle DDI requests not covered by automated systems (DNS record creation/deletion/modification, DHCP management).
• Investigate and resolve DDI‑related incidents.
• Ensure continuous monitoring of all systems and manage alerts promptly.
• Keep asset inventories current and drive remediation when reconciliation gaps are identified.

Required Qualifications, Capabilities, and Skills (Area/ Required knowledge / experience)

Technical Competencies (must have proven experience in at least two of the following areas)

Firewalls

• Advanced understanding of firewall platforms, architectures, topologies and protocols.

• Hands‑on experience with Fortinet and/or Check Point solutions.

Proxies

• Strong grasp of HTTP and SSL/TLS protocols, proxy concepts, traffic interception, and security functions.

• Practical experience with Skyhigh or Blue Coat proxy products.

Load‑Balancing

• Solid knowledge of load‑balancing architectures, algorithms, and DNS/GSLB concepts.

• Experience with F5 technologies.

DNS/DHCP

• Familiarity with DNS, DHCP and IP‑address management (IPAM) concepts and architectures.

• Experience with Infoblox solutions.

Remote Access

• Understanding of VPN protocols (IPSEC, SSL) for end‑user access.

• Experience with Cisco ASA/FTD platforms.

Administration & Automation

• Proficiency with monitoring tools (e.g., Zabbix, SolarWinds, HPOO, Dynatrace) and SNMP.

• Ability to write/maintain scripts in Python, Bash or Perl.

• Experience using Ansible for automation and deployment.

Preferred Qualifications, Capabilities, and Skills

• Formal certifications (e.g., Check Point CCSA/CCSE, Fortinet NSE, F5 Certified BIG‑IP, Infoblox DDI, Cisco CCNA/CCNP Security).
• Prior experience in a banking or financial‑services environment.
• Familiarity with HSM appliances (Entrust) and AVI Networks load balancers.
• Exposure to additional automation/orchestration tools (e.g., Terraform, Puppet).
• Experience with ITIL/ITSM processes and incident‑management frameworks.
• Strong analytical and problem‑solving skills.
• Ability to work independently and as part of cross‑functional teams.
• Effective communication with both technical and non‑technical stakeholders.
• Proactive attitude toward continuous improvement and knowledge sharing.

About BNP Paribas Solutions - Philippines Branch

Established in 2024,BNP Paribas Solutions Philippines Branch is a branch of BNP Paribas Group, a leading bank in Europe with an international reach. We provide support services, back-office operations services related to or which further the accomplishment of the corporation’s investment services, banking transaction processing, and equity investment.