Lead IT Design - Security (Hybrid)

The Lead IT Design Security will have responsibilities to plan, design, build and maintain Harley Davidson's network security infrastructure. Success is measured by the ability to consistently achieve key functional and individual results with superior quality and delivery across the technology. Maintain and provides effective security design solutions to meet system strategies, capabilities, and technologies, to respond to current and future business requirements.

• Individual contributor role with cross functional responsibilities.
• Security architecture, design, and delivery of technology solutions
• Leading the design, configuration, and implementation of technical solution governance across diverse global functional business areas.
• Ensure seamless end-to-end integration of solutions, conduct essential integration testing, and validate technology adherence to Service Level
• Agreements and Key Performance Indicators.

• Design, configure, integrate, maintain, and troubleshoot enterprise LAN and WAN networks.
• Responsible for the configuration, maintenance, and optimization of Cisco ASA, FMC, FTD, CDO, and Firepower.
• Manage the deployment, configuration, and maintenance of a Cisco Identity Service Engine (ISE) infrastructure which includes Policy Admin, Monitoring and Policy Services Nodes.
• Provide Tier 3 technical troubleshooting to resolve complex problems or issues involving security products, firewalls, ACL rules, ISE, complex routing, and NAT rules.
• Create and publish critical documentation for new systems and updating documentation for existing systems as needed.
• Manage the deployment, configuration, and maintenance of Cisco AnyConnect and IPSec site-to-site VPNs.
• Working knowledge of Cisco Umbrella security platform services.
• Hands-on experience with Gigamon traffic aggregator appliances is a plus.
• Collaborate with cross-functional teams to develop and enforce security policies and procedures.
• Evaluate potential vendors and security products to determine which provide the best fit for the organization's needs.
• Design, configure, and maintain network segmentation firewalls, DMZs, and Edge egress filtering.
• Working knowledge and understanding of cloud Azure networking configuring such as VPC, TGW, IGW, security groups, NACLs.
• Architecture and knowledge of Zero Trust Network Access (ZTNA) using Palo Alto Prisma or FortiSASE is highly preferred.
• Efficiently hand over implemented solutions to the Operations team and provide training to empower employees in utilizing modern technology platforms or systems.

• Bachelor's degree in computer science or information technology
• Cisco CCNP Security or higher Certifications.
• Having Microsoft Azure, Palo Alto, or Fortinet certification is a plus.

• In-depth working knowledge of SIEM, networking protocols, firewalls, intrusion detection/prevention systems, VPN technologies, ISE, Cisco Umbrella, and SASE platform architecture.
• 8 + years of security engineering and operations experience in a distributed location, geographically disperse production environment.
• Familiarity with vulnerability testing tools and methodologies.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication skills, both written and verbal
• Proven experience in designing and implementing network security solutions in complex environments.
• Strong understanding of security best practices, compliance, and regulatory requirements.

Preferred Qualifications

• Experience leading projects requiring technology design and implementation of security products.
• In-depth working experience with Cisco enterprise security grade products is preferred.