We are part of International Airlines Group (IAG), one of the world’s leading airline groups and owner of some of the biggest brands in the sky. 

With a diverse workforce spread across four countries, IAG GBS provides creative and innovative solutions to drive sustainable transformation by delivering finance, procurement, and airline services, as well as group-wide systems across IAG. Each operating company benefits from the GBS centralised model, driving efficiencies, automation, and economies of scale. 

IAG Tech’s vision is to increase shareholder value, accelerate business performance, delight customers, enable employees, and protect our business through the innovative and agile use of technology and data. 

Purpose of the role

The Senior Network Security Engineer is responsible for supporting the design, configuration, monitoring and maintenance of network security hardware, systems, and software; including preparing any documentation for future reference and ensuring communication regarding network security and other issues is provided timely.

Accountabilities

Working in partnership with IAG Tech and the business to:

• Be the lead security technical role in resolving complex network security device incidents, applying diagnosis, maintenance, change and configuration control attributes to bring about a resolution.
• Consistently perform and deliver outputs within the service contract time constraints (KPI’s & OLAs/SLA’s).
• Analyse traffic behaviours, identify and resolve any congestion or traffic issues related to network security hardware or protocols.
• Develop and implement detailed logical designs in areas of – Firewalls, Load balancers, Layer 3 VPN, Layer 2 VPN.
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.

• Operations Management: Ensure all escalated requests are handled in line within the agreed service levels and are handled efficiently and effectively. Ensure customer communication is managed effectively and in line with customer expectation and any specific contractual SLA/OLA agreements. Perform network security administration activities to ensure the smooth operation of services across multiple platforms. Diagnose and support with recovery activities for P1 and P2 incidents to enable services to operate.
• Stakeholder Management: Effectively manage and coordinate internal and external relationships to meet expectations on change deployment timelines and processes. Contribute to the planning of network infrastructure software releases and schedule configuration changes accordingly to avoid network downtime for customers.   

Must Haves:

• 5+ years of hands-on experience in network security engineering.
• CCNA and CCNP Security certifications (desirable, or experience working up to this level)
• Extensive experience in Cisco network security 
• Firewall expertise - ideally Checkpoint, can be Palo Alto 
• Experience in incident and problem management, with a background in multinational operations.
• Proven ability to manage and troubleshoot infrastructure components such as servers, routers, firewalls, desktop users, and mobile devices.
• Juniper network experience.
• ITIL certification or practical experience with ITIL processes.

Nice to Haves:

• CISSP and CCSA certifications.
• F5 Certified Technical Specialist (BIG-IP) certification.
• Exposure to AWS/Cloud technologies.
• Experience working with proxy servers, F5 load balancers, and advanced security tools.