Network Systems Engineer at Equity Bank Kenya

Description

Equity Bank is one of the region’s leading banks whose purpose is to transform the lives and livelihoods of the people of Africa socially and economically by availing them modern and inclusive financial services that maximize their opportunities. With a strong footprint in Kenya, Uganda, Tanzania, Rwanda, South Sudan and DRC Congo, Equity Bank is now home to over 12 million customers - the largest customer base in Africa. Currently the Bank is seeking additional talent to serve in the role outlined below.

The network security engineer role will revolve around designing, configuring, deploying and maintaining the comprehensive enterprise network security infrastructure with active participation in security reports and audit responses, ensuring the bank is compliant with all applicable regulations.

Key duties and responsibilities will include;

• Designing, configuring, deploying and maintaining the state enterprise network security infrastructure.
• Analyzing problems, recommending solutions, products, and technologies to meet business objectives.
• Evaluating and performing planning, testing, and implementation of software and hardware upgrades.
• Actively protecting Bank information technology assets and infrastructure from external or internal threats and ensuring that the Bank complies with statutory and regulatory requirements regarding information access, security and privacy.
• Implementing firewall solutions to properly secure bank data and provide consultation on all new firewall implementations, firewall configuration changes, and projects requiring security operational support.
• Assisting the end-user, other IT professionals, and external customers in requesting security variances and implementation of subsequent configuration change requests.
• Recommending best security practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results
• Assisting in incident response for any breaches, intrusions, or fraudulent activities.
• Monitoring systems for any anomalies, proper updating, and patching. This includes issues raised by information security teams.
• Maintaining system documentation and configuration data for regulatory and audit purposes.
• Coaching and guideing Service Desk and Desk Side Support technicians in their incident response, directing incident first responder actions, and appropriately escalating issues.

Qualifications

• Bachelor's Degree in any computing discipline (Science/Engineering), from an accredited institution.
• Industry accepted Certification or equivalent  from Technologies' providers such as Cisco, Checkpoint, F5, Brocade, HP, Oracle, e.g. CCNP/E Routing & Switching, CCSP/E, f5-CTS,N+,A+
• Strong knowledge of data, security, & operations regulations and their application including ISO, HIPAA, PCI-DSS and other applicable regulations.  

Critical Competencies

• High personal integrity, self-motivation, accountability.
• Strong grasp of technology impact on business awareness.
• Excellent and effective communications skills, both orally and in writing.
• Able to work independently, without direct supervision.
• Strong technical, analytical and problem solving skills in a complex environment.
• Well-developed system architecture planning, design implementation and support skills.
• Customer service and results oriented attitude with excellent interpersonal skills.
• Ability to quickly learn, work effectively within a business or technical team.
• Cultural sensitivity.

Essential Knowledge

• Must possess working knowledge with basic experience of computers, servers, storage, operating systems, programming and generally good knowledge of the OSI model layers.
• Demonstrated understanding of network implementation concepts including switching VLANs to segmentation, routing, IP sub-netting, unicast, multicast, broadcast, , DHCP, access control lists, routing protocols, encryption, authentication, and/or IP packet forwarding.
• Mandatory knowledge with at least two years experience in basic networking technology especially routing and switching technology facets of design, build, configuration and troubleshooting.
• Working experience with design, implementations & Support, of infrastructure support system such as directory systems e.g. Active Directory, DHCP, DNS, NTP, PKI, virtualization.
• Detailed knowledge and experience with Open Short Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), and Border Gateway Protocol (BGP), MPLS.
• Direct work experience with the design and implementation of 802.11 wireless networks.
• Working knowledge with one or more of security equipment namely Next Gen Firewalls, Web Application Firewalls, Intrusion Prevention Systems, Identity Services Engine, Packet Shaping, Web Gateways (proxies) e.g. Checkpoint,Palo Alto, Ironport, Source fire, Cisco, Juniper, F5.