Network Security Engineer | Infrastructure As A Service @ING Bank

Discover ING Bank Romania

ING believes in a world where everyone has the right to grow and progress in their own way. We express this in our global tagline, “do your thing”. Perhaps more than in any other large company, we extend our belief in the power of autonomy to our own people. But there’s a catch. In return for great freedom, we expect people to do great things for our customers, our stakeholders, and ING at large.

To work here is to be surrounded by people who are energetic, ambitious, friendly and respectful: talented specialists who take the responsibility and autonomy to make great things happen. We stay curious, thrive on change, and seek new and better ways to make it happen. Active in Romania for more than 30 years, ING Bank pioneered and challenged the local banking industry. Technology and innovation are at the core of what we do, making our products relevant for our customers’ lives and businesses.

ING Bank Romania is the only bank with an organic growth within the top 10 local banks by assets, without acquisitions of client portfolios or other banks. ING Bank Romania is an universal bank with more than 1.8 million customers from three business segments: individuals (retail), SME and Mid-Corporate companies and Wholesale Banking.

Join us!

Mission

Network Security engineer role is part of the ING’s Tech Platform Services tribe, with responsibilities on managing large scale (national and international) network products and services, supporting ING Bank applications’ data transfers by implementing and operating highly secure and resilient network security solutions.

The role is responsible on translating business and functional requirements into concrete deliverables ensuring scalability, reliability, compliance and security considering full range of products & services from Core Infrastructure, Platforms and Workplace Experience thus supporting organization Cloud journey and Digital by default processes.

As part of the Engineering domain, you will have the opportunity to share your passion with other Network Security Engineers by developing and expanding technical skills with open mind, curiosity to discover new way of thinking, challenging assumptions and making room for diversity.

We are encouraging entrepreneurial mentality expressed into a challenging and highly collaborative environment which nourishes innovation using technology as the main driver to progress.

Your day to day

• Work with next-generation firewalls, DDoS protection tools, load balancing appliances, reverse proxies, AAA, web and VPN gateways;
• Employ cutting-edge solutions from vendors such as F5, Palo Alto, Cisco, FortiNet, Skyhigh;
• Develop, maintain, protect and troubleshoot a complex network infrastructure;
• Apply cloud architecture principles in designing and developing functional areas of a cloud, including automation, infrastructure, consumption platform, security;
• Automate repetitive tasks using tools like Ansible, Azure Pipelines, Puppet, Terraform alongside Python, LUA, bash, etc;
• Keep an eye on the infrastructure with monitoring and alerting platforms such Zabbix, Grafana, Prometheus;
• Perform periodic administrative tasks, including software upgrades, lifecycle management and maintain regulatory controls;
• Proactively review the environment and take initiatives to reduce failures, defects and improve performance;
• Perform system checks based on monitoring events and correct any issues;
• Analyse the performance, do proactive troubleshooting, continuous improvement and capacity planning;
• Ensure timely and accurate resolution of the incidents on the administrated systems;
• Investigate problems in the production environment;
• Document tasks and changes, perform impact analysis to prevent any downtime;
• Maintain security and data integrity for infrastructure applications.

What you bring to the team

• University degree in Information Technology;
• 7-10 years of experience in a similar position in Infrastructure (Bank, IT company);
• Professional experience with two of the following fields: IT Security, Networking, DevOPS, DevSecOPS;
• Professional qualifications: relevant certifications such as CCNA/CCNP Security, CompTIA Security+, CEH, CISSP, CySA;
• Good understanding of Windows / Linux operating systems;
• Good knowledge of Linux/Unix OS commands;
• Good knowledge of scripting / automation ( Python, Bash, LUA, PowerShell) and orchestration platforms (Ansible, Puppet, Azure Pipeline Automation, Terraform );
• Experience with (some of) the following technologies: DDoS mitigation appliances, Next-Generation Firewalls (Palo Alto, Checkpoint), F5/NGINX, WAF, Proxy (McAfee Web Gateway), AAA servers (Cisco ISE), Ansible, Azure Pipelines;
• Familiar with the agile way of working;
• Foreign language requirements: English B2 or higher.

What we offer

• Impactful work in a fun and collaborative environment
• Open-concept offices designed for both teamwork and relaxation;
• Corporate events and social gatherings;
• Hybrid way of working with flexible working schedule and short week options;
• Monthly budget on Benefit platform;
• Extra annual leave days depending on the total length of working experience;
• Growth opportunities through upskilling/ reskilling programs and a variety of learning and development platforms: ING Learning Centre, Udemy, Bookster, as well as through trainings and certifications;
• Possibility to access Internal roles, International Short-Term Assignments or Long-Term Assignments;
• Context to make an impact through Sustainability and Corporate Social Responsibility projects.