CE Network Security (Technical Engineer)

We are looking for an Network Security Technical Engineer having expertise experience in designing, implementing and maintaining experience within Network Security Area. Zscaler, Cisco and/or Citrix ADC certificates are recommended.

within Technical Service Area Network have a joint mission to release the power of the product teams in Business Tech by providing cutting edge technology solutions, platforms and services, and also by guiding and supporting in DevOps practices and modern ways of working.

We embrace cloud services, API’s and automation and want to be more data driven, utilize machine learning and leverage economy of scale where it is beneficial for the group.

Network Security product team consists of 5 fully dedicated and customer centric minded members. We are focusing on managing and developing tooling solutions for network security as well as govern it and ensure compliance.

We are an enabling team building and managing stable and frictionless infrastructure for the whole company organizations to rely on and build their solutions upon.

Work tasks:

- Develop, build and manage (DevOps) Network Security solutions for H&M Group globally (e.g. firewalls, IPS, proxies and load balancers)
- Participate in assessing existing implementations, designing future state, and building transition plans for implementation of cloud security setups
- Being an advisor in designing, planning and implementing Network Security Infrastructure projects in the respective technology area
- Coordinate and manage high priority incidents
- Monitor usage, capacity and performance of security systems components within H&M Group
- Cooperate and coordinate with stakeholders within business, security, run services and network related products/areas
- Contribute to the Domain and Product Area strategy and OKRs
- Be responsible to keep our production Network Security setups documented and ensure that the required knowledge is available for other product teams
- Take ownership and end to end responsibility for the solutions/functions within product team
- Constant improvement of the solutions (automation, upgrades, LCM, etc.)
- Follow all Service Management Processes including but not limited to Change, Configuration, Problem and Incident Management Processes
- Striving for cost efficiency and automation based on trends and new technologies for Network Security solutions during our journey towards the Cloud based solutions
- Supporting (act as a 3rd level) Network Security functions for on-prem and cloud implementations
- Provide technical engineering and best practices concerning the overall security of the organization’s network infrastructure
- Stay current with industry trends and best practices, making recommendations as needed to help our company develop and deliver cloud future state architectures and roadmaps


Mandatory requirements, both competence and tools:

- Deep understanding and experience in IP Networking
- Network foundations (LAN, WAN, DNS, NAT, routing)
- Expert in security solutions provided by Cisco, Zscaler and Citrix ADC (proven by certificates)
- Knowledge of network protocols
- Experience and excellent understanding of Network Security products (IPS, proxy, firewall, reverse-proxy, load balancing, VPN)
- Experience in network monitoring tools and solutions (e.g. Cacti, NNMi, Riverbed)
- Expertise in Cloud networking and security
- Network automation experience
- Ability of network troubleshooting (pcap, Wireshark, NetFlow).
Experience and understanding of developing and managing/operating (DevOps) Network Security solution


Qualifying requirements:

- Basic understanding of Agile methodology and tools used (Jira/Confluence)
- Understanding or experience within Azure cloud
- Understanding of IPAM solution (e.g. Infoblox)
- Firewall Management Process solutions/tools (e.g. Tufin)
- API/integrations experience
- Scripting, programming experience (e.g. Python)
- Understanding of compliance auditing (e.g. PCI-DSS)
- DevOps practices
- At least basic knowledge or experience of ServiceNow
- Vulnerability testing knowledge
- Experience in network as a code concept


Personal Competences:

- Energetic, have forward thinking and push for innovation
- Active learning
- Ability to take responsibility, work proactively and continuously improve activities in complex, quickly transforming environments
- Strong communication skills enabling you to liaise between multiple departments
- You are skilled at working in tandem with a team of engineers, or alone as required
- Manage multiple tasks and project and any given time


Language skills:
English - working proficiency.