Network and Security Architect

We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more than 75 000 people dedicated to solving real-world mobility challenges and achieving international projects with sustainable local impact.
Reporting to the Industrial IT Manager and functionally linked to the Head of Security Design and Network Security Operations will be in charge of handling end to end technical aspects of LAN,WAN and Network Security for Alstom Digital Services Organization. The Technical expert will be the sole responsible person to handle and end to end network design issues and to come up with any enhancement at the right time to provide excellent service to Business. The Ideal candidate will be responsible for resolving all critical technical issues within Alstom network ecosystem.

Network Design and Architecture:
Developing comprehensive network architecture plans for LANs, WANs, SDWAN, Zero Trust Access(ZTNA), and other network components, considering scalability and future needs.
Selecting appropriate network hardware and software, including routers, switches, firewalls, and intrusion detection/prevention systems.
Designing network segmentation and access control mechanisms to mitigate security risks.
Focus on Secure network architectures and supporting technology solutions within the enterprise
Security Policy Development:
Defining and implementing robust security policies and procedures for network access, data encryption, user authentication, and incident response.
Establishing security baselines and standards for network devices and configurations

Security Solution Implementation:
Deploying and configuring security technologies like firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and data loss prevention (DLP) solutions
Implementing encryption standards for data at rest and in transit
Ensuring network infrastructure adheres to relevant industry regulations and compliance requirements (e.g., Implementation and Maintenance:

~ Deployment and configuration:

Oversee the installation, configuration, and testing of network infrastructure and security devices according to established standards.
~ Performance monitoring:

Monitor network performance metrics, identify bottlenecks, and implement optimizations to ensure network stability and availability.

• Work closely with IT teams including system administrators, security analysts, application developers, and business stakeholders to ensure alignment with security requirements.
• Lead incident response activities in case of network security breaches, coordinating with relevant teams to contain and mitigate damage.

Security awareness training:
Contribute to security awareness programs by educating users about network security best practices and potential threats
Maintain an awareness of business, technical, architecture, infrastructure, and end user support issues and act as sounding board to aid in the development of creative solutions•
Develop and maintain measurable health and performance metrics; Assess performance to ensure that it meets the present and future needs of the business.
Responsible to liaison with Business and other key stakeholders to assess the business and identify key challenges, constraints, and risks and thereby define the project scope after extensive due diligence.
Responsible for developing and maintaining knowledge management portal using MS Share Point.
Participate in operations meeting & track action items to ensure key deliverables is met.
Monitoring missed SLA and daily monitoring of critical issues and escalating to management, when it exceeds the threshold.
Manage escalations of critical technology issues impacting business and customer facing systems with appropriate root cause analysis documentation.
Participate with Operations Teams, in reviewing and challenging ongoing service and commercial performance from service partners through regular reviews and unlock additional value creation at an operational/tactical level.

To be considered for this role, candidate need to demonstrate the following skills experience and attributes:
Bachelor’s/Master’s degree in Engineering/Technology or related field
Expertise in network protocols (TCP/IP, routing protocols, MPLS)
Deep understanding of network security concepts (firewalls, VPNs, intrusion detection/prevention systems, access control lists)
Familiarity with network automation tools and scripting languages (e.g., Python, Ansible)
Knowledge of cloud network security architectures (AWS, Azure, GCP)
Minimum 10 years of relevant IT experience
Strong network analysis and troubleshooting skills.
Professional industry standard certifications like CCNA/NP/IP/IE etc.Experience in an operational role working directly with internal and external customers, trouble ticketing systems, and incident management
Good Understanding of Disaster Recovery planning, Resiliance and High availability features.

Builds strong networks within and across functions / geography

• Work management, organization and planning
• Able to manage multiple initiatives with short and long term priorities
• Ability to successfully implement change through relationships built on a local, regional and global level

An agile, inclusive and responsible culture is the foundation of our company where diverse people are offered excellent opportunities to grow, learn and advance in their careers. We are committed to encouraging our employees to reach their full potential, while valuing and respecting them as individuals.

Job Type:​Experienced​