Responsibilities:• Establish Global Network Security Architecture Strategy in line with the overall business strategy and contribute to the application of the principles of the global security model • Contribute to the translation of security policies into operational security standards• Develop reference models for architecture, define and manage architecture artifacts• Support CTO tribe leaders, Product managers and owners in the design of the architecture, specify the various settings and define the technical security requirements to integrate new systems or upgrade existing systems • Advise on the choice of technical solutions and recommend secure architectures • Participate in the choice of Solution providers from a security perspective • Regularly review the existing architecture, identify gaps, and make recommendations for security improvements• Define security validation testing strategies and monitor recommendations• Ensure regulatory compliance where applicable • Help establishing CyberSecurity Key Performance Indicators• Advise on the use and combination of existing security bricks• Analyze the security risks associated with the introduction of recent technologies• Monitor new threats and take them into account when defining security architectures • Maintain relationships with suppliers to ensure a technological watch on innovations and security tools to integrate them into security architectures if necessary• Contribute to improve the CyberSecurity maturity of operational Product Managers and product owners• Collaborate with technical security specialists to consolidate a holistic view of security

- Product engineering, development, and testing including hardware and software product definition and standards- Network Solution Architecture and solution blueprint design and definition- Expert role in the covered technology areas- Providing operational support during incidents where specialist knowledge is required through escalation- Providing support to Problem Management activities when needed- Ensuring product and solutions are designed and aligned with architecture principles, business requirements, firm-wide compliance/audit requirements, Credit Suisse standards and regulatory requirements- Assisting and advising Product Management as necessary with tasks including Requirements Management, Roadmap and Service Definition etc.- Providing technical leadership

- Analysis of internal client needs and developing solutions for network infrastructure, with particular emphasis on security aspects;- IP network infrastructure planning, preparing complex technical projects of network and security solutions in the areas of Core / DataCenter / DMZ;- Planning and managing IP addressing scheme;- Implementing new security solutions in the Banks ICT environment;- Research and testing new network solutions and technologies for the implementation of the network and systems management with an emphasis on security area;- Developing HLD & LLD documentation of implemented solutions;- Creating procedures for implemented changes, DR (disaster recovery) and security solutions.- Mantaining and monitoring critical network security infrastructure, analysis and reporting incidents of security breaches.- Providing 3rd line network & security support in Core/DataCenter/Campus/DMZ area

- Maintaining and monitoring Internet edge network (Cisco ASR series, protocol BGPv4), event analysis for network incidents and DDoS attacks;- Managing Firewall and IPS/IDS systems based on Cisco, Palo Alto Networks, McAfee solutions;- Managing load-balancer clusters based on Cisco, F5 Netrworks solutions;- Managing systems providing remote access for users and external companies - SSLVPN, IPSec IKEv1/IKEv2;- Managing systems providing secured access to the LAN/WAN network (802.1X) and Internet access based on ForcePoint (Identity URL Filtering);- Administering RADIUS/TACACS servers based on Cisco ACS and Cisco ISE solutions;- Tracking, analyzing and reporting security events in the internal and external network with SIEM solutions;- Developing network management system with regard to systems monitoring access to the network;- Planning IP network development, cooperating with telecom operators;- Providing 2nd line network support in the field of Core/Data Center/DMZ network (Diagnosis, analysis and removal of irregularities of the network).

- Mantaining and monitoring LAN/WAN infrastructure (IP/MPLS, FR, ATM, ISDN) based on the Cisco ISR & Cisco Catalyst series devices - 1000+ branches, 500+ ATMs and 25 000+ end-users;- Mantaining and monitoring Core/DataCenter infrastructure based on Cisco Nexus 7k/5k, Catalyst 6500 devices, managing Blade switches ( IBM, HP, Fujitsu);- Configuring and troubleshooting routing protocols - OSPF, EIGRP;- Analyzing network traffic in terms of performance and network events using NetFlow, Syslog, SNMP;- Providing 1st line network support for internal clients;- Administering network management systems based on HP OpenView/Network Node Manager, Cacti, Nagios (monitoring the utilization of lines, creating scripts, logs, archiving);- Implementing LAN/WAN/Core/DataCenter infrastructure;- Work with ISPs in the field of making measurements and acceptance of services (report analysis, Service Level Agreement);- Preparing and implementing complex projects of a Bank LAN/WAN network;- Developing network documentation.