NTT Data/ Network

Job Title: Network & Security Engineer with Web/DevOps Skills 

Location : Sud Ile de France, périphérie Paris

Role Summary: 

We are seeking a highly skilled and adaptable Network & Security Engineer with strong Web/DevOps experience to architect, secure, and automate the advanced networking infrastructure supporting our AI Factory. This role involves managing high-bandwidth fabrics (RoCE, InfiniBand) across Dell/NVIDIA GPU clusters, ensuring secure and resilient connectivity for AI/ML workloads. You will collaborate closely with DevOps and AI platform teams to streamline deployment, monitoring, and incident response for cloud-native applications running on OpenShift and Kubernetes, while integrating cutting-edge GPU orchestration and data management solutions. 

Key Responsibilities: 

Network & Security: 

Design, deploy, and secure high-throughput network architectures supporting RoCE and InfiniBand fabrics for AI/ML workloads. 

Manage Dell/NVIDIA-based GPU networking environments, including backend and frontend switch configurations (e.g., Z9432F, S5248F). 

Design, deploy, and manage secure, scalable network architectures (LAN/WAN, VPN, firewall, routing). 

Implement and maintain network security controls across RDMA-enabled fabrics, ensuring isolation and integrity of GPU clusters. 

Configure and maintain network security devices including firewalls, IDS/IPS, and VPN concentrators. 

Monitor and analyse traffic across 100G/200G fabrics using advanced SIEM and telemetry tools. 

Perform vulnerability assessments, threat modelling, and implement mitigation strategies. 

Respond to security incidents, conduct root cause analysis, and support forensic investigations. 

Ensure compliance with industry security standards and regulatory requirements. 

Collaborate with security teams to implement Zero Trust and network segmentation strategies. 

Web/DevOps: 

Work alongside DevOps teams to design, deploy, and maintain CI/CD pipelines and infrastructure automation. 

Manage container orchestration environments (Openshift/Kubernetes/Docker) focusing on GPU-aware scheduling and network policies and security enforcements. 

Automate network and security infrastructure using Infrastructure as Code (Terraform, Ansible, etc.). 

Integrate security controls and best practices into automated build and deployment processes. 

Monitor web services for performance, availability, and security issues using Prometheus, Grafana, ELK stack, etc. 

Support web application security testing (SAST/DAST) and vulnerability remediation. 

Develop scripts and tools to automate repetitive tasks and improve operational efficiency. 

Required Skills & Experience: 

Deep understanding of RoCE, InfiniBand, and high-speed networking protocols. 

Experience with Dell/NVIDIA GPU infrastructure and switch management (Z9432F, S5248F). 

Strong background in network security technologies and RDMA-aware security practices. 

Familiarity with OpenShift, Kubernetes, and container networking. 

Proven experience in network engineering: TCP/IP, routing, switching, VPN, VLANs, firewalls. 

Strong background in network security technologies (firewalls, IDS/IPS, VPNs). 

Experience with cloud networking and security on AWS, Azure, or GCP. 

Hands-on experience with Kubernetes and container networking/security. 

Familiarity with CI/CD pipelines and DevOps tools (Jenkins, GitLab CI, CircleCI). 

Proficiency in Infrastructure as Code tools (Terraform, Ansible, CloudFormation). 

Knowledge of AI/ML pipeline security and GPU orchestration platforms (RUN:AI, NVIDIA Enterprise). 

Experience scripting with Python, Bash, or PowerShell. 

Understanding of web services, APIs, and HTTP security concepts. 

Knowledge of monitoring/logging tools (Prometheus, Grafana, ELK stack, Splunk). 

Strong troubleshooting and analytical skills with a security mindset. 

Preferred Qualifications: 

Certifications such as CCNP Security, CISSP, CEH, CKA/CKAD, or relevant cloud security certs. 

Experience with Zero Trust architectures and network segmentation. 

Familiarity with container security best practices and tools like Aqua, Twistlock, or Falco. 

Experience working in Agile and DevSecOps environments. 

Knowledge of regulatory frameworks (PCI-DSS, GDPR, HIPAA). 

Education: 

Bachelor's degree in Computer Science, Information Security, Network Engineering, or equivalent experience.