As Network Security Engineering Enterprise Architect (GSR8), based in India you will be a technical lead supporting Ford's complete Enterprise Network & Security architecture transformation. You will be taking care of dynamics for Network Security Engineering Products (Security Firewalls, Proxy, ISE, SDN Networks, Wireless) team to a center of technical excellence and customer Advocacy. You identify, analyze, and resolve existing network security design weaknesses and vulnerabilities which could possess risk to existing infrastructure. Expert in closing zero-day security vulnerabilities taking along all infrastructure domain teams which could impact Ford's reputation across globe. AS Network Security Engineering enterprise architect, you would lead future network security product development by contributing to the network Design (architecture)and Automation used across multiple Engineering Branches, Data Centers, Manufacturing Plants and Remote users. This Role requires defining road map for ZTNA/SASE deployment using Prisma Access/Cloud, setup support model, automation to accelerate end user experience. The Global Network Security Engineering enterprise architect is responsible for successful setup of the products by working closely with Software developers from Ford and OEMs in consultation with Fords Network and Security Operations Team. This position will be part of Ford's Enterprise Tech department and will report to the Regional Network Delivery Manager, based in same or another region. The lead needs to ensure "Always On" (24 x 7) availability of Ford Global Network Product offerings, working with Network & Security Peers from other regions.
Responsibilities- Lead network security architecture and engineering initiatives across global enterprise environments.
- Define and execute roadmaps for SASE, Zero Trust Network Access (ZTNA), and cloud-delivered security services.
- Design, implement, and maintain secure solutions including firewalls, proxies, DDI, wireless security, and load balancing platforms.
- Drive automation initiatives to improve operational efficiency, scalability, and customer experience.
- Partner with Network Operations, Security Operations, Product Engineering, and external vendors to deliver secure and reliable services.
- Identify security vulnerabilities and lead remediation activities, including response to critical security advisories and zero-day threats.
- Establish monitoring, observability, and reliability practices that support 99.999% service availability objectives.
- Lead technical reviews, architecture assessments, and major incident response activities.
- Develop and maintain security standards, policies, and best practices.
- Provide technical leadership, mentoring, and guidance to engineering teams across global regions.
- Bachelor's degree in Computer Science, Engineering, Information Security, or related discipline.
- 12+ years of enterprise IT experience.
- 6+ years of network security engineering experience in large enterprise environments.
- Hands-on experience with Palo Alto Prisma Access, Cisco Umbrella, Zero Trust Network Access (ZTNA), and Secure Access Service Edge (SASE) solutions.
- Strong expertise in enterprise network security architecture, firewalls, intrusion prevention systems, and proxy technologies.
- Experience with DNS, DHCP, and IP Address Management (DDI) platforms.
- Strong knowledge of routing, switching, wireless technologies, WAN, SD-WAN, and software-defined networking.
- Experience with F5 load balancers, SSL offloading, virtual servers, and iRule development.
- Hands-on experience with network troubleshooting and packet analysis tools such as Wireshark and Viavi Observer.
- Experience driving automation using scripting languages and APIs.
- Strong stakeholder management, communication, and cross-functional collaboration skills.
- Palo Alto, Cisco, or F5 certifications.
- Knowledge of cloud networking and cloud security architectures.
- Experience with Ansible, Terraform, Python, or network automation frameworks.
- Experience implementing observability and Site Reliability Engineering (SRE) practices.
#LI-MF2
