Network Security Engineer

• Maximize the business value from Sanofi’s Digital Technology and Solutions investments.
• Unleash innovation for our organization, employees, and customers.

Main responsibilities:

Network Security Engineering

• Design and implement scalable, efficient, & cost-effective enterprise network security solutions

• Next-generation firewalls, VPNs, IDS/IPS, secure web gateways, and network access controls.

• Keep Sanofi safe through active operation and defense of critical network infrastructure, developing and maintaining firewall policies, security zones, NAT, routing, and access-control policies.
• Implement secure LAN, WAN, SD-WAN, Internet, data center, and cloud connectivity.
• Design, implement and support network segmentation, micro-segmentation, and Zero Trust security initiatives.
• Conduct security reviews of network designs and infrastructure changes.
• Ensure network security controls comply with enterprise security standards and policies.

Ultimately, ensure high levels of security, availability, and performance within the Sanofi’s environment.

Cloud & Modern Network Security

• Implement security controls across AWS, Azure, and/or other cloud environments.
• Secure hybrid and multi-cloud network connectivity.
• Design secure connectivity between data centers, cloud platforms, SaaS environments, and remote users.
• Support SASE, SSE, Zero Trust Network Access (ZTNA), and cloud security initiatives.
• Partner with cloud engineers to secure VPC/VNet, routing, security groups, and cloud firewall architecture.

Security Operations & Incident Response

• Monitor network security events and investigate suspicious network activity.
• Troubleshoot and respond to network security incidents.
• Participate in incident response, root-cause analysis, and remediation activities.
• Analyze firewall, proxy, VPN, IDS/IPS, DNS, and network traffic logs.
• Work with SOC teams to improve detection and response capabilities.
• Perform vulnerability remediation and security hardening of network infrastructure.

Automation, Improve Efficiency & Continuous Improvement

• Automate service delivery, network security provisioning, configuration, compliance, and operational processes.
• Develop scripts and workflows using Python, Ansible, Terraform, APIs, or similar technologies.
• Implement Infrastructure-as-Code and configuration-management practices.
• Develop automated security compliance and configuration validation.
• Identify opportunities to reduce manual operational activities through automation.

Governance & Documentation

• Maintain network security architecture diagrams, standards, procedures, and operational documentation.
• Participate in security assessments, audits, and compliance activities.
• Ensure network changes follow enterprise change management and security processes.
• Evaluate emerging security technologies and recommend improvements.

Drive Continuous improvement of solution platform, specification & design, systems integration, platform lifecycle management.

Contribute to security standards, reference architectures, and engineering best practices.

About you:

• 7+ years of experience in network engineering or network security engineering.

• Understanding complex technical issues and managing them within a fast-paced business environment.
• An enthusiasm for staying up to date with the very latest updates about security threats and technology solutions.
• Strong experience in architecture/design, development, and implementation of large-scale Network Security technology and solutions.
• In-depth knowledge of Firewalls platforms from Palo Alto, Cisco and Checkpoint, IPS/IDS,
• Experience with LAN, WAN, Internet, data centre, and/or SD-WAN environments and understanding of Network Routing and Switching.

• Experience with AWS and or Azure networking, Cloud solutions and Network Access Control.

• Experience with SASE, SSE, ZTNA, and Zero Trust architectures.

• Understanding of and exposure to network segmentation and methodologies like SCADA and enable it to be both manageable and scalable.

• Experience using firewall security orchestration and Python, Ansible, Terraform, REST APIs, and network automation.
• Hands-on experience with Audit for Firewalls configurations, ACLs and implementing security controls aligned to Sanofi’s policies and standards.
• Excellent Troubleshooting and problem-solving skills
• Occasional work outside business hours
• Good communication and presentation skills in English including the ability to convey complex security related concepts to technical and non-technical audiences alike.

Pursue progress, discover extraordinary

Better is out there. Better medications, better outcomes, better science. But progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. So, let’s be those people.

At Sanofi, we provide equal opportunities to all regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, ability or gender identity.

Watch our ALL IN video and check out our Diversity Equity and Inclusion actions at sanofi.com!