Secure Networks Lead

About the role

The objective of this role is to lead the Secure Networks engineering

team, who design security infrastructure and perimeter defences in line

with Haleon Security Guidelines. You will be contributing to the

definition and deployment of Network Security across IT and OT for Cloud and

Edge.

The role will also be accountable for directing, architecting and

implementing Consumer Health’s automation and orchestration framework for

converged networking. Including the systems technology framework and API

definition for managing lifecycle operations for Cloud Networking in Azure

and GCP and Edge Networking infrastructure/services across IT and OT

environments.

We are looking for someone who has hands on experience in working with

technology and our expectation is that the successful individual will also help

design, test and deploy new solutions as well as provide L4 support as and

when needed.

You will hold a CISM/CISSP certification and demonstrate a mix of

technical and business stakeholder engagement abilities. Excellent

communication skills are a pre-requisite.

Key responsibilities

• Minimum 12+ Yrs experienced Secure Network Lead, leading the Secure Networks engineering team, who engineer and deploy Palo Alto firewalls via Panorama
• Acting as the product owner for all Secure Networks products, such as Palo Alto, Panorama and ZScaler

• Working towards a Zero Trust model, creating relevant architectures, strategy and deliverables
• Risk assessments and mapping out controls
• Experience and understanding of Infrastructure as Code provisioning/management and tooling (eg: Hashicorp’s Terraform)
• Ensuring documentation is to the highest standards
• Automation around networking and security devices
• Lead the engineering team’s agile ceremonies
• Provide hands on support and guidance to our managed service providers and

more junior members of the team

• Provide L4 support during critical outages
• Quality assurance of designs and templates through adoption of industry best

practices

Qualifications and skills

Essential

• Expert Knowledge of Palo Alto Firewalls and Panorama
• Experience deploying Palo Alto Firewalls in cloud and on-prem environments
• Knowledge and experience of deploying Zscaler ZIA & ZPA
• Knowledge and experience of implementing and supporting Tufin
• Practitioner understanding of Azure networking (VNet Peering, NVAs, Express

Route, NSG, VMSS, Firewall etc) and or cloud networking constructs of GCP or

AWS (VPCs, Direct Connect etc.)

• Excellent stakeholder management skills, building good relationships both

internally and externally

• Azure AZ500 & Palo Alto PCNSE Certification, ZIA & ZPA Professional

Certifications

• Experience working within NIST Framework
• Good understanding of cloud security with practical knowledge of security solutions for Azure, GCP, AWS and AilCloud
• You have a strong understanding of network security fundamentals

Preferred

• Awareness of DevSecOps
• Working experience of Agile methodologies
• Awareness of CI/CD and tools like Azure DevOps (VSTS) and GitHub
• Jira and Confluence
• Knowledge of cloud security controls including tenant isolation, encryption at rest, encryption in transit, key management, vulnerability assessments, application firewalls, SIEM etc.

Please save a copy of the job description, as this may be helpful to refer to once the advert closes.

Care to join us. Find out what life at Haleon is really like www.haleon.com/careers/
At Haleon we embrace our diverse workforce by creating an inclusive environment that celebrates our unique perspectives, generates curiosity to create unmatched understanding of each other, and promotes fair and equitable outcomes for everyone. We're striving to create a climate where we celebrate our diversity in all forms by treating each other with respect, listening to different viewpoints, supporting our communities, and creating a workplace where your authentic self belongs and thrives. We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.
As you apply, we will ask you to share some personal information, which is entirely voluntary. We want to have an opportunity to consider a diverse pool of qualified candidates and this information will assist us in meeting that objective and in understanding how well we are doing against our inclusion and diversity ambitions. We would really appreciate it if you could take a few moments to complete it. Rest assured, Hiring Managers do not have access to this information and we will treat your information confidentially.
Haleon is an Equal Opportunity Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class.
Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, Haleon may be required to capture and report expenses Haleon incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure Haleon’s compliance to all federal and state US Transparency requirements.