Senior Tufin Consultant / Network Security Policy Automation

Project overview

Context

The Application Network Security department, split between Paris and Toulouse, manages the network security policy protecting applications hosted in datacenters. It ensures the operational maintenance of security solutions, evolution projects, and security controls, in close collaboration with infrastructure teams.

The team currently uses Tufin (SecureTrack and SecureChange) to manage its traditional firewalls (Fortinet, Palo Alto). The challenge: extend these uses to the Illumio and VMware NSX microsegmentation environments.

Missions

Tools & Environment

Working Conditions

• Define and manage the implementation of new network security policy automation use cases, primarily focused on Build with a part of Run.
• Design the automation architecture
• Analyze automation needs for traditional, Illumio, and NSX environments
• Define the target architecture and integration principles with Tufin, particularly via APIs
• Propose a progressive deployment trajectory, in batches, taking into account existing tools and processes
• Define operating rules, controls, and exploitation methods for automations
• Build and deploy automations
• Prioritize the implementation of compliance controls on Illumio and NSX
• Support the cleanup of existing rules
• Extend and improve the automation of security rule creation and modification
• Deploy in batches by coordinating the network security experts in the team
• Test and document automations before commissioning
• Support the team and contribute to Run
• Lead the automation subject and act as the link between Tufin experts and firewall, Illumio, and NSX specialists
• Support teams in adopting the solutions
• Contribute to the diagnosis and resolution of incidents within your scope
• Participate in operational maintenance and N2/N3 on-call duty outside of working hours (one week every 6 to 8 weeks)
• AlgoSec
• Tufin
• Fortinet, Palo Alto Firewalls
• Illumio Microsegmentation
• VMware NSX
• APIs and network security policy automation
• Mission Location: Toulouse
• Long-term mission: 36 months
• Remote work: 2 days per week
• Start date: ASAP
• Professional English required
• Seniority required: Minimum 8 years of experience in the indicated technologies

Project details

• Start: flexible
• Remote: hybrid
• Location: Toulouse, France, FR
• Languages: French