Network Security Architect

As Fresenius Digital Technology, we are an integral part of the Fresenius Group, responsible for the IT of the healthcare group and its business segments. We ensure a frictionless interface of IT and business operations so that all employees in production, logistics, and other areas can work efficiently and without interference.

We are seeking an experienced Network Security Architect to join our IT Security team. This role is essential in managing and overseeing network/application firewalls, IPSs, VPN, and proxy solutions to ensure robust security measures are in place. The ideal candidate will be skilled at analyzing security risks and issues, incorporating infrastructure and network requirements, developing appropriate architectures and patterns, and guiding teams on design, implementation, and policy development.

The role and responsibilities include:

• Analyze network diagrams and traffic patterns to understand current design
• Establish and document global architecture standards for network security
• Oversee projects implementing security controls
• Consult with different business teams and translate the requirements into technical documents
• Act as a single point of contact for all technical actions in network security
• Drive architectural / technical discussions and projects around network security
• Provide technical leadership and mentoring to the team
• Define and verify log fields for different use-cases, that are defined by Cyber Security team
• Demonstrate a strong understanding of network segmentation concepts, the Zero Trust security model and related security controls
• Utilize extensive experience on NextGen firewalls (Cisco, Palo Alto, Checkpoint, Fortinet) and the different feature sets
• Apply experience with Intrusion Prevention Systems (IPS)
• Manage internet proxy solutions (cloud based and on premise)
• Demonstrate knowledge on routing protocols including BGP, EIGRP and OSPF
• Have working knowledge of switch, ACLs, VRFs, and VDCs
• Integrate with CMDB, fault monitoring systems, orchestration systems etc.
• Possess a deep understanding of Data Center and campus Network Architectures, industry standards and architectural principles
• Expertise in securing data in motion (site-to-site vpn, client-to-site vpn, IPSec, web VPN, tunneling)
• Exposure to large scale network security transformation programs

Requirements:

• Ability to review existing network architectures and designs under security aspects
• Expertise in identifying gaps and work with stakeholders (vendor, and business entity) and enable them to deliver network architectures
• Ensure sanity of Network and Security Architecture in scope
• Perform Vendor Management / Stakeholder Management
• Ability to trace requirements to end-state solution
• Manage technical programs to ensure that end-to-end solution is delivered
• Prepare, review, and approve HLD and LLD

What can we offer you:

• Great collaboration and knowledge sharing spirit
• Stable employment in a company with international environment
• Benefit package (private medical health care, multisport card, life insurance, social fund, fruits in the office, integration events, employee pension program)
• Work in a modern office located in Wrocław city centre (pl. Nowy Targ) or from your home (we meet at the office once a week)
• Excellent teamwork culture and friendly atmosphere