IT Network Security Engineer - Ansell Biyagama

About the job

Why Ansell?

At Ansell, by staying two steps ahead of workplace risk, we aim to deliver innovative safety solutions that enhance people's quality of life. As a global leader in protection solutions, we design and develop a wide range of products, including gloves, clothing, and other protective gear, to keep workers safe and productive in industrial, medical, and consumer applications.

Discover more about our company, our team, and our values by visiting us at https://www.ansell.com.

Ansell is looking for an IT Security Engineer to join our team in Sri Lanka.

In this position, you will play a vital role in ensuring that the correct tools and processes are in place to reduce the risk of exposure to Ansell assets. The position holder will be responsible for the global IT security infrastructure, ensuring it is strategically positioned to protect critical 24/7 business environments. In addition, the position holder will be responsible for the implementation of new designs and services, along with enhancements to the security environment.

Ideal candidates should have a solid understanding of network security, architecture, equipment configuration, and common protocols. The candidate should have a strong working knowledge of standard security practices with a focus on perimeter protection.

What benefits and opportunities does Ansell offer?

• Competitive compensation, including a performance-based annual incentive
• Flexible and hybrid schedule
• An inclusive and collaborative environment that values diversity and fosters an international culture
• Ansell University programs to develop professional and interpersonal skills
• Opportunities to advance and grow within the company

What will your role be?

Collaborating with our cross-functional teams and reporting to the Manager, IT Network, you will have the opportunity to:

• Responsible for all areas of network security, including Firewalls, IDS/IPS, Web Content Filters, Remote Access solutions, and AAA
• Respond to IT security incidents through remediation and escalation.
• Support requests and other incidents from various constituencies
• Configure network equipment on-site and in remote locations
• Participate in infrastructure upgrades, changes, and enhancements
• Implement and integrate new network architecture into an existing environment
• Create and maintain documentation as it relates to network configuration, network mapping, processes, and service records
• Administer IT vulnerability management platforms, including automation of scans, reporting, and remediation.
• Monitor network status and performance, analyze logs from multiple systems, and troubleshoot networking problems when they emerge
• Perform in-depth analysis of IT processes and procedures to increase security posture
• Audit user and group account permissions
• Create user awareness training materials and evangelize security across the organization.

What will you bring to Ansell?

• Bachelor’s degree in Computer Science (IT), Technology major preferred or similar.
• Certifications desired: Cisco Certified Network Associate Security (CCNA-Security) / Cisco Certified Network Professional Security (CCNP-Security), Certified Information Systems Security Professional (CISSP), ISA/IEC 62443 Cybersecurity Certificate(s).
• Years of experience with Cisco firewall configuration
• Extensive knowledge of Next Generation Firewall configuration and management using Cisco Firepower Threat Defense (Access Control Policies, IDS/IPS, VPNs, etc.)
• Vast experience with Identity Access Management using Cisco ISE
• Network segmentation knowledge, including Micro-Segmentation and Zero Trust architecture
• Hands-on experience with Vulnerability scanners and SIEM systems
• Good understanding of manufacturing operation service cycle and practical experience in Industrial networking
• Familiarity with ISA 99 / IEC 62443 industrial control system networks standards
• Knowledge of FISMA 2002 Cyber Security Requirements
• Experience in Cisco routing & switching (IOS, IOS-XE)
• Familiarity with SD-WAN
• Familiarity with Cisco Meraki Wireless
• Experience with Private and Public clouds (Microsoft Hyper-V, Azure)
• Experience in working against established SLAs and monitoring them
• Experience with Microsoft Directory infrastructure and services
• Good understanding of ITIL processes
• Prior experience in troubleshooting and resolving network problems using network monitoring tools
• Travel required