Network Solution Architect
Thales Group | Torino, Provincia di Torino, ITPosted a month ago
Description
A Joint Venture between Thales (67%) and Leonardo (33%), Thales Alenia Space is a global space manufacturer delivering, for more than 40 years, high-tech solutions for telecommunications, navigation, Earth Observation, environmental management, exploration, science and orbital infrastructures. Thanks to our diversity of skills, talents and cultures, our customers (governments, institutions, space agencies, telecommunications operators), therefore have Space to Connect, Secure & Defend, Observe & Protect, Explore, Travel & Navigate. And at the end is placed as a TAS-Thales standard for every vacancy.
Job : Network Solution Architect
Mission
Within the Enterprise Architecture department, the Network Solution Architect participates during the design and build phases of projects in order to guarantee the global consistency of the enterprise IT technical architecture.
The Technical Solution Architect’s role is to design solutions that satisfy the business needs, whilst assessing the impacts upon current systems architecture and working with the IT & Security directorate to ensure compliance with IT standards, norms and rules.
We are looking for a Network Solution Architect to join our Network & Security squad and implement technical architecture designs that will improve our organization’s network & infrastructure, and ultimately support upcoming business & IT transformations.
Responsibilities
- Guarantee consistency of technical architecture
- Ensures compliancy with the enterprise architecture methodology, technical design process, design principles & rules and relevant IT standards & norms
- Applies a frugal approach to the design process, by promoting reuse of architecture components & patterns and favoring cost efficient & sustainable architecture designs
- Advocates technical design choices to ensure the coherence of this evolution for all Thales Alenia Space countries
- Contributes to the capitalization and sharing of knowledge on the Information System (through modeling, documentation, communications, trainings)
- Proposes new additions and updates to the architecture principles & rules repository
- Participates actively to the architecture governance process, from demand to delivery
- Advise upon technical architectures & solutions
- Designs One-TAS technical architectures in response to a business project or architecture change requests
- Analyzes and checks the technical impacts of the proposed architecture solution and their coherence with the existing architecture elements for all countries (As-Is & To-Be analysis)
- Proposes technical architecture designs that respect the contextual constraints: priority, time, resources, organization & data
- Informs stakeholders about any issues with the current technical solutions being designed and implemented
- Collaborates with the IT & Security teams to ensure that that proposed technical architecture corresponds to expected performance, adaptability & interoperability objectives
- Facilitates the architecture design, risk assessment & security validation process and documents architecture decisions in the decision log
- Supports, provides expertise and performs verifications during the implementation phase (roll-out), before delivery in production
- Researches upon current and emerging technologies in relation to technical areas agreed upon by Management
- Identifies & proposes opportunities/implementation use-cases for which the enterprise could generate sustainable benefits or resolve recurrent issues with emerging technologies or architecture designs
- Participates in proof of concepts
Technical skills
As a member of the Network & Security squad, the Network Solution Architect is involved in the following technical domains:
- Network infrastructure and FW
- Network flows, FW filtering, FW objects naming
- DMZ, Bridge infrastructures
- Proxies (including NG Proxies)
- Cyber Security
- Bastion / PAM (Privilege Access Management)
Therefore, we are looking for strong, proven skills in Network and Cyber security:
Network
[Required skills]
- High & low-level network infrastructure design & modeling
- Telecom: Phone architecture (IP and TDM technologies), Visio conference architecture (through ISDN and IP network). PBX interconnection (Alcatel solutions)
- Protocols : TCP/IP, Multicast and routing protocols
- LAN: Ethernet, L2 and L3 backbone architecture, 802.1w, 802.3ap, Wi-Fi
Software Defined Network (SDN) technologies
- WAN : MPLS, Internet access, WAN Optimisation, SD WAN
- DDIN services (Infoblox or equivalent)
- Network based security solutions: UTM Firewalls and VPN technologies, authentication protocols, NAC / EVAS technology, IDS/IPS, IP cyphering (Thales solutions), FW Security Policy management solution (Tufin or equivalent)
[Nice to have skills]
- Network implications for Unified Communication solution and associated infrastructure (Cisco Jabber, Microsoft Teams)
- Network implications for IoT architectures in the context of Industry 4.0 solutions (IIoT protocols, interchange & transformation)
- Network implications for Cloud/hybrid cloud technical architectures (Azure, Google, Amazon)
- Network implications for mobility solution (Cisco AnyConnect)
- Physical network layer: structured cabling, technical room and data room specification
Cybersecurity
[Nice to have skills]
- Bastion / PAM concept and solutions (e.g. CyberArk, Wallix, …)
- Cyphering equipment, HSM
- IDS/IPS, DLP, SOC principles
- IAM and PKI principles
Digital
[Nice to have skills]
Good knowledge in Digital / Cloud architectures is also appreciated
- Cloud service models (IaaS, PaaS, SaaS, SASE, …)
- Offering of the main cloud service providers : Azure, AWS, Google, Aruba, TIM and Leonardo
- Roles and usage of IaaS, PaaS, SaaS
- Concepts of agile development in the Cloud (CI/CD, backends in the Cloud, …)
- Concept of Cloud hybridation
- Web Services & APIs
- Security layers related to Cloud (PAM/Bastion, VPN, Zscaler, authentication AD/LDAP, encryption, …)
- DevSecOps environment and processes (agile development, CI/CD)
- IoT concept and principles
- BigData concept and principles (SDDC, vxlan, docker, K8S, PKS, S3, …)
Desirable architecture & technology certifications
- VMware Certified Professional/Advanced Professional
- Network Virtualization (VCP-NV)
- Datacenter (VCP-DCV)
- Cloud Management & Automation (VCP-CMA)
- Security (VCP-Security)
- Microsoft Certified Azure Solutions Architect Expert
- Google Professional Cloud Network Engineer or Professional Cloud Architect
- AWS Certified Solutions Architect – Professional
- Cisco CCNP Enterprise
Managerial and behavioral skills
- Excellent communication skills
- Ability to build good relationship with clients/operational managers and colleagues
- Ability to gather and assimilate information
- Problem-solving aptitude
- Organizational and leadership skills
- Assist with solving technical problems when they arise
- Ensure the implementation of agreed architecture and infrastructure
- Address technical concerns, ideas and suggestions
Languages
- Ability to write IT documents and to attend or manage a meeting in Italian and/or in English. The language for all architectures studies in English.
- French [Nice to have]
Experience
- Proven experience as a Senior Architect(minimum 5 years)
- Location: Torino
- Type: Full time
