Security Architect

Security is increasingly important for mobile users. A significant portion of mobile subscribers are likely to switch operator in case of security issues, and they are willing to pay extra for reliable security protection. Nokia is leading the industry in taking important steps towards responding to the concerns of mobile users and building advanced telco security solutions.

We are looking for experienced security architects. The challenges you will face include creating complete architecture solution, technology roadmap, plans, feasibility studies, performance targets, contacting 3^rd party / OEM, creating requirements, contracts, approving deliveries. It is a great opportunity for you to develop yourself by creating complex solutions in newest technology areas.

As a Security Architect you will be working in the Mobile Broadband Security Solutions team located in Wroclaw, dedicated for all Security solutions in Telco Networks (Radio Access Technologies, Core Networks).

• be a part of a group of Security Architects and act as a main contact person for technical aspects

• work closely with Security Solution Product Managers (Product Owners) to ensure the consistency of the solutions across the involved areas, technical feasibility and maturity of solutions in the security domain, build Marketing Communication packages, White papers, Value Based Argumentation

• rollout Internal BD Enabling and PoC/Pilot Customer engagement key sessions

• interwork with Security Research and Standardization teams

• support internal cross-functional R&D teams during refinement, planning, review meetings within your area of expertise/responsibility

• design and help in implementation of network and application solutions in own lab and test environment,

• analyze elements in telecommunication network (how to secure them and how to show their data/status)

• assure reuse of components and solution blueprints from other security products

• communicate and synchronize actions with internal stakeholders

• Experience in architecture tasks – design of a complete solution, documentation preparation, PoC rollout,

• Excellent communication skills and experience in contacting customer, 3^rd party vendor, leadership team,

• Excellent knowledge of :

  • standard COTS infrastructure and Operating systems (e.g. HP Blade Centers, Linux)

  • mitigating and addressing threat vectors

  • network security and troubleshooting

  • security devices, their configuration and implementation

• Significant experience in:

  • active and proactive securing of the networks

  • implementation and integration of the network security systems

  • implementation of the following areas: ngFW, Element Manager, virtualization and related solutions (i.e. VMware ESXi, KVM Hypervisor)

- Experience in:

• design and/or implementation of the following areas: vulnerability scanning tools and management, network monitoring tools, SIEM, IDP/IPS, DDOS Solutions for Carriers, Signaling Security Solutions (SS7, Diameter, SCTP safeguards and products), GTP-aware Security Controls and FW, High-Performance Security Gateways, Radio Access (Security), cloud computing (i.e. Openstack, VCloud), SDN and Service Chaining implementations, cloud service Orchestration & Management, Security services for Telco Cloud environment, Cloud Security Concepts (i.e. IaaS)

• various Industry API Interfaces and Languages for Orchestration

• exposure to Hosted Cloud Security Service (provider view) or SecaaS deployments,

• security functional areas:
  (e.g. credential management, access provisioning, authentication and authorization, access governance,
  application security, infrastructure security, data security, security monitoring)

• network administration, firewall configuration, setting VPN, system hardening, building a defense in depth infrastructure security architecture that includes security controls across multiple technology stack

- Hands-on experience of a diverse range of security technologies:
(e.g. multivendor stateful, non-stateful, and application firewalls, HIDS, NIDS/NIPS, SSL and IPSEC VPN’s, DLP, database technologies, load balancing, encryption technologies, mobility security, cloud security)

- Security Certification and 3^rd party vendor (Check Point, Juniper, Infoblox, Cisco) Certification

- Good end-to-end system know how of LTE/WCDMA/GSM system