Technical Leader in Operational Security – Tufin/Algosec - N3

Project overview

Context

Global objective: Build, automate, and industrialize network security policy management with Tufin.

The department contributes to the operational maintenance of security solutions under its responsibility, evolution projects, and security controls, in close collaboration with infrastructure teams. The team currently relies on Tufin (currently SecureTrack and SecureChange) for managing traditional firewalls, notably Fortinet and Palo Alto. Extending Tufin's use to Illumio and VMware NSX microsegmentation environments remains to be designed and implemented.

In this context, we are looking for a senior consultant with proven expertise in Tufin or, failing that, in AlgoSec, a comparable solution. Significant AlgoSec experience may be considered if the consultant can quickly transfer their skills and become autonomous on Tufin. The consultant will contribute to defining and piloting the implementation of new network security policy automation use cases.

The mission will be primarily Build-oriented, with a Run component and participation in the N2/N3 on-call duty operated by the team.

MISSIONS

Study the network security policy automation needs for traditional, Illumio, and NSX environments.

Define the target architecture and integration principles with Tufin, particularly using APIs.

Propose a progressive implementation roadmap, organized in batches, taking into account existing tools and processes.

Define operating rules, controls, and exploitation methods for automations.

Design and implement compliance controls on Illumio and NSX environments as a priority.

Study and support the cleanup of existing rules.

Extend and improve the automation of security rule creation and modification.

Deploy evolutions in batches, coordinating contributions from the team's network security experts.

Test and document automations before they go live.

Lead the automation subject and ensure the interface between Tufin experts and specialists in traditional firewalls, Illumio, and NSX.

Support the team's experts in adopting and using the implemented solutions.

Contribute to the diagnosis and resolution of incidents within its scope.

Participate in the operational maintenance of the team's activities and perform N2/N3 on-call duty outside of working hours (every 6 to 8 weeks).

Technical skills

Tufin (or AlgoSec) - Expert - Mandatory

Fortinet/Palo Alto - Confirmed - Mandatory

Illumio - Confirmed - Important

VMware NSX - Confirmed - Important

Language skills

Professional English (Mandatory)

Profile sought

Senior consultant with proven expertise in Tufin or, failing that, in AlgoSec, a comparable solution. Significant AlgoSec experience may be considered if the consultant can quickly transfer their skills and become autonomous on Tufin.

Work environment

• Design the automation architecture
• Build and deploy automations
• Support the team and contribute to Run

Project details

• Start: ASAP
• Duration: 18 mois
• Remote: hybrid
• Location: Toulouse, Occitanie, FR
• Languages: French