Specialist/Sr. Specialist - Network Security

Principal responsibilities:

• Provide day to day global network security operation by using varied technologies used to protect the network infrastructure of Linde
• Implement secure system configuration standards with associated documentation (System update / upgrade)
• Operational lifecycle management of security devices
• Review & implementation of technical change requests
• Collaboration with local & regional IT teams in delivering day to day network security services.
• Security log file management - review & analysis of security log files
• Ensuring compliance of the current network security environment, ensuring any deviations from policy or standards are reported, addressed, and resolved in a timely fashion.

Required critical behaviours

• Reliable execution, drive for high and consistent quality
• Ability to plan and manage the own workload
• Good communication skills and ability to work in teams across locations, time zones and cultures
• Self-motivated, with the ability to learn and work in a meticulous and organized manner
• Keen to learn new technologies, concepts and skills
• Good analytical and problem solving skills
• Ability to create usable professional documentation
• Thinking outside the own box

Required key skills (functional/technical)

• Good communication skills both verbally and written in English language
• A reasonable technical knowledge of network security concepts and technologies (e.g. Azure IaaS , Palo Alto FW , Akamai)
• Able to demonstrate a logical and methodical approach to analysis, audit, troubleshooting and problem solving
• Knowledge of basic networking concepts, such as VLANs, Routing, Firewall, Wireless etc.
• Able to adopt a sensitive approach towards confidential information
• Strong analytic skills to diagnose on security processes and procedures
• Understanding of different technical domains and the security issues around them
• Experience in the following products / technologies:
1. Palo Alto Firewall Management - PANONRAMA/ NGFW (Primary focus)
2. Cloud Platform IaaS/PaaS (Azure Primary Focus) - For Azure NSG , App GW , LB , VNET , IP subnet, Route tables, DDoS , ARS, VPN-GW, Express Route, Az Marketplace
3. Knowledge on SD-WAN deployment on Azure IaaS
4. Threat prevention / zero day attack prevention technologies
5. Network Security Configuration Management F5, Signing SSL certificates (PKI)
6. Knowledge on DNS and management
7. Hands on experience on Akamai WAF/ CDN configuration for various logic (Primary focus)
8. End to End Secured WEB Hosting experience, so that no vuln. present- OWASP
9. Knowledge on programming / scripting (Terraform, Python) is an added advantage
• Mobility - Willing to travel, on rare occasions, on demands of the job, based on discussion and pre-agreement.
• Flexibility - Willing to work flexible hours or on shifts - based on job or project requirement from time-to-time based on discussions and pre-agreement.
• Willingness to be available for On-Call support depending on the criticality of the on-going project.
• Integrity - The role mandates maintaining integrity as a constant
• Be well-informed of, updated with and ensure adherence to applicable anti-trust and competition rules of The Linde plc.
• Be aware of and continue to be an upholder of all Compliance-related requirements, specific to The Linde Plc. as well as the local requirements.
• The holder of this role shall not deliberately and actively procure any Competitively Sensitive Information from the Competitor, Employee or disclose any Competitively Sensitive Information themselves. If the individual receives unsolicited Competitively Sensitive Information, he/ she shall: