Infrastructure Engineering Analyst (Firewall Engineering)

At the World Bank, a member of the World Bank Group (WBG), you’ll join a diverse, global community working across cultures, disciplines, and borders to address the world’s most pressing development challenges. With 1.2 billion young people reaching working age in the decade ahead, the challenge of job creation has never been greater. Through partnerships across 145 countries and more than 182 offices worldwide, we work with governments, private sector, development partners and other stakeholders to invest in people, strengthen markets, and deliver scalable, data-driven solutions that generate more and better jobs and improve lives. For more information, visit https://www.worldbank.org/en/who-we-are/ibrd ITS Vice Presidency Context The Information and Technology Solutions (ITS) Vice Presidential Unit (VPU) enables the World Bank Group to achieve its mission of ending extreme poverty and boost shared prosperity on a livable planet by delivering transformative information and technologies to its staff working in over 150+ locations. For more information on ITS, see this video: https://www.youtube.com/watch?reload=9 v=VTFGffa1Y7w Unit Context The Infrastructure Engineering team (ITSIN) designs, builds, and maintains the foundational, end-to-end IT infrastructure that supports the World Bank Group’s global operations. By championing automation, modernizing systems, and collaborating closely with other technology units, the unit delivers secure, scalable, and cost-effective digital services that empower the organization to advance its global development objectives. Duties Responsibilities: • Combine Next Generation Firewall and Network Engineering skills. • Assist with the Design, Deployment and Maintenance of Next Gen Firewall infrastructure on-prem and in the cloud. • Maintain User Identification design for a zero trust environment. • Manage SSL Decryption policies and troubleshoot related issues. • Maintain hardware templates and Template Stacks. • Manage Cloud Identity Engine. • Manage Zone Protection and DOS protection policies design and deployment. • Manage security and implement policy through Strata Cloud Manager. • Assist with Palo Alto SD-WAN support • Evaluate Palo Alto CVEs and recommendations for mitigating risk. • Enhance the team’s proactive monitoring capability by creating automated reports/alerts (using Splunk) for Firewall events. • As part of project requirements, use modern scripting languages and automation engines to automate firewall and network tasks. • Use APIs to integrate the automation tasks with other enterprise systems. • Update documentation (drawings, spreadsheets, procedures) of firewalls and related network and producing reports for peer and management review. • Handle escalation calls from the NOC, performing triage, resolving problems, or escalating to team members. • Travel as needed to other WBG offices to promote mobility support advocacy, knowledge sharing, and facilitate deployments and improvements. • Flexibility to work in shifts including night shift if required. • Provide on-call support on rotational basis based on need. Specific Activities Include: • Maintain the World Bank Group’s Firewall infrastructure for Headquarters, Country Offices and Cloud. • Deploy, maintain and replace Palo Alto Firewall Appliances and Virtual Appliances in accordance with the Organizational Standard. • Enhance the team’s proactive monitoring capability by creating automated reports/alerts (using Splunk, Ansible) for Firewall events. • Ensure compliance with various security standards for the environment. • Handle escalation calls from the NOC, perform triage, and resolve problems. • Provide continuous monitoring and troubleshooting for Firewall Infrastructure including adequate follow up on Problem Resolution tracking using the ServiceNow tool. • Monitor and review use of systems for World Bank access control policy violations in line with World Bank’s guidelines. • Ensure that the defined decommissioning and disposal procedures are followed for all hardware systems and media. • Report and respond to critical security events and take corrective measures per defined security incident management processes. • Follow and comply with the World Bank Group policies, processes, and procedures. • Participate in audits, as needed, producing necessary documentation, reports, and explanations, and implement corrective and preventive action plans approved by unit managers. • Take personal responsibility and accountability for timely response to client queries, requests or needs, while working to remove obstacles that may impede execution or overall success. • Able to present and explain technical information to diverse types of audience (management, users, vendor, and technical staff)