Technical Security Architect - Singapore - Blupace

Description

Why join us?
Blupace is a world-class IT development company that strives to improve its processes constantly. The company has been in business since 2008 and employs over 160+ people in more than 4 countries.

Blupace provides innovative software solutions for businesses of all sizes, with a focus on Web & Mob Applications, e-commerce websites, data & Analytics, Field services and more.

We are passionate about developing innovative technology solutions that make a difference. We have the expertise and experience to provide custom-tailored solutions for your business, whatever your field may be.

Our team is dedicated to providing you with the best possible service, and we are always looking for new ways to improve our products and services.

It is a Singapore based Onsite opportunity.

What we're looking for...

Job Purpose:

To conceptualize, design and implement the correct technical architecture and solutions in client environment, provide the required guidance to teams on high level design solutions and reduce project risk through accurate effort estimation and team skills.

Key Responsibilities:

• To conceptualize and create the technical architecture framework designed as per project specifications.
• To effectively design and review high level technical product designs as per client requirements.
• To guide the teams and ensure timely delivery of the DC Build.
• To implement the technical architecture framework in client environment.
• To create reusable documents to capture all facets of the project progress.
• Evaluate alternative technologies and architectures in relation to Customer infrastructure needs.
• Design and manage the rollout of critical network infrastructures to complete DC Build.
• Develop Best Practices for implementation, migration, and transition.
• Ensure that network infrastructure is fully documented and performing as required for internal and customer SLA guarantees and expectations by means of specific metrics and measurements.
• Should be able to create Low Level Design, High Level Design, Implementation Plan, and Acceptance Test Plan documents in accordance with Customer's standards.
• Design deploys and support Data Center Networks utilizing industry best practices.
• Excellent communication skills. Must be able to clearly interact with the customer, understand the requirements and communicate to Assess vulnerabilities, identify, and implement mitigation plans.

Core Networking and Network Security

• Monitor network performance and troubleshoot problem areas as needed.
• Experience in designing, implementing, troubleshooting Network Infrastructure.
• Assessment of emerging network and network security infrastructure technologies.
• Planning, Designing, Implementation and Operation support for Enterprise Network and Network Security Infrastructure.
• Understand business requirements from Internal and External Customer and translate into technical requirements and solution.
• Experience of designing, deployment, and management of Network Security Infrastructure (Next Gen Firewall/Palo Alto, Remote VPN, AAA, ZTNA, SASE.

Cloud Networking and Security

• Experience of Public Cloud and Hybrid Cloud Architecture.
• Configure/Troubleshoot Private Cloud Architecture and Design
• Configure/Troubleshoot Public Cloud Architecture and Design
• Experience in Azure Network and Security Infrastructure Troubleshooting.
• Experience in AWS Network and Security Infrastructure Troubleshooting.
• Good understanding of Next Generation Cloud Security Architecture and Technologies.
• Design, Solution and Configuration of Network Security Infrastructure on Public CSPs.

Skills required:

• Should be good in working with Visio.
• Experience in Network Automation using Python.
• Should have good understanding on Firewalling, NAT, Proxy, RA VPN etc.
• Good understanding on AAA principles and ISE deployment is required.
• Understanding of the ZTNA principles and SASE solutions deployment.
• Must understand Data Centre cable matrix and experience of GF deployment.
• Should have worked on Palo Alto Firewalls for a minimum of 5 years.
• Should have worked on Zscaler setup at L3 Level for a minimum of 5 years.
• Should have prior experience of supporting Palo Alto remote access VPN solution.
• Strong analytical and troubleshooting skill in network security area.
• Experience of working on AWS and Azure CSP is must.
• Ability to work alone as an individual contributor, as a technical lead and as a participant in a team environment.

The responsibility of the Onsite engineer for the SSBT GF Deployment is to build the Security Platform devices primarily Palo Alto Firewalls, Zscaler ZIA Proxy Solution, Cisco ISE Deployment and F5 ASM WAF


These include:

• Rack and stack the PaloAlto Firewalls, LTMs, Cisco ISE Appliances.
• Understanding and experience of Cable Matrix in DC deployments.
• Configure the Management IPs on the Firewalls, LTMs, ISE nodes.
• Activate the Support and software licenses.