Network & Security SSE Expert - Product Owner Zscaler - Freelance

Context

The Group IT department is organized around Shared Line of Services (SLS) to deliver global services to all group entities.

SLS infrastructure delivers Cloud Service Provider based services (AWS and Azure) and centrally managed Network services (Backbone, Site to site VPN, internet access filtering, VPN access for end users, IPAM, SDWAN solution…).

Within the SLS Infrastructure, the Network & Security SSE Expert will be a member of the Engineering team, responsible for designing, deploying, and maintaining new service offers based on high-end market solutions. Becoming product owner of these services, they will conduct RFPs to select the most appropriate technical solutions to meet network infrastructure service needs, ensuring smooth integration into the IT information system. They will design the solution with the corresponding service offer included in the SLS infrastructure service catalog.

Achieving a scalable design respecting corporate standards and cybersecurity rules and transitioning the service to operations within the Side Partner operations team is mandatory to operate at scale.

They will also ensure technologies used are updated according to vendor lifecycle and that vulnerabilities are addressed within deadlines required by Cyber teams.

They will ensure that service health is properly monitored through the monitoring solutions in place at the SLS infrastructure and that service consumption can be charged back to customers.

Customers should be able to raise service and support requests modeled by the product owner of the service in the ITSM solution.

Finally, they will handle support escalations from the Operations Team with necessary assistance from vendors.

Missions

• Define Network & Security around SSE Solution Zscaler
• Conduct RFPs for selecting the right technology
• Produce KPIs based on services delivered
• Maintain the product lifecycle
• Ensure level 3 support with vendor escalation when required
• Ensure proper transition of run activities to operational teams
• Define service monitoring, backup, service request, and support escalation paths
• Contribute to the billing & chargeback model applied to customers
• Ensure standards and cybersecurity rules are respected
• Interact with necessary stakeholders to define, budget, design, build, maintain, monitor, backup, report, support, and charge the service back to customers
• Become Product Owner of SLS infrastructure services
• Design and maintain Network and Security services
• Respect cyber requirements for service design
• Ensure transition to operations of the services
• Ensure proper level of backup
• Ensure proper monitoring by defining monitoring rules
• Assume level 3 support on the services
• Contribute to cost optimization of managed services
• Arrange webinars on major feature updates and changes
• Deliver automation-driven services
• Ensure proper documentation (ISO 27001)
• Create KPI dashboards for services
• Present feature availability, updates, or improvements to the Design Authority and Architecture Review Board
• Contribute to security audits, risk assessments, pentests, and remediation

Deliverables (ISO 27001)

• HLD (High-Level Design)
• LLD (Low-Level Design)
• SOP (Standard Operating Procedures)
• KPI Dashboards
• RCA (Root Cause Analysis)

Experience and Education

• 5 years of higher education (computer engineering degree or equivalent)
• At least 5 years of experience in an equivalent position in a company of similar size
• Experienced in managing vendor contracts

Skills

• ISO27001 knowledge — Confirmed
• Knowledge of operating systems (Windows, Linux Redhat) — Advanced
• Strong organizational and coordination skills for multi-disciplinary and multi-cultural teams — Confirmed
• Knowledge in NAC solution appreciated (Cisco ISE) — Basic
• Knowledge in routing & switching appreciated (Juniper, Cisco, Meraki) — Basic
• Good knowledge of network, security & SSE technologies — Confirmed
• Ability to automate — Confirmed
• Good knowledge of public cloud hosting infrastructures (AWS and/or Azure) — Advanced
• Knowledge in site-to-site VPN appreciated (Fortinet, Cisco) — Advanced
• Knowledge in WiFi solutions (Cisco Meraki, Juniper) — Basic
• Expertise in cloud-based internet access and private access (Zscaler ZIA & ZPA) — Expert
• English — Confirmed
• Knowledge in SD WAN solutions (Cisco Catalyst, Cisco Viptela) — Basic
• Knowledge in firewalling appreciated (Fortinet, Cisco, Palo Alto) — Advanced