Network Security & Infrastructure Consultant

International Business Machines Corporation; São Paulo; On-site; BRL 180,000 - 360,000; Full time

Job summary

IBM Consulting seeks a seasoned security architect to design and secure network and data platforms across enterprise environments, including cloud applications. You will contribute to pre-sales with PoCs and proposals, and present architectures to IT leaders and CISOs.

Expertise in NGFW, VPN, ZTNA, CASB, and SSE/SASE is required, with strong DLP, cloud security, and SIEM/EDR integration skills. Travel as needed to client sites is expected.

Qualifications

• Solid experience in network security and large-scale projects.
• Hands-on with NGFW, VPN, segmentation, DNS security, and proxy.
• Professional English proficiency and willingness to travel.

Responsibilities

• Design architectures to protect networks, cloud apps, and data.
• Support pre-sales with PoCs, sizing, and technical proposals.
• Present solutions to IT managers, architects, CISOs, and stakeholders.
• Integrate security platforms with SIEM, SOAR, EDR, and identity solutions.
• Develop technical documentation and transfer knowledge to clients.

Skills

Network security

ZTNA

SASE/SSE

DLP

CASB

Cloud security

EDR

Security architecture

English proficiency

Willing to travel

Tools

Cisco Umbrella

Palo Alto Networks

Fortinet

Zscaler

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

You will act as a technical specialist in network and data security platforms, designing architectures and solutions to protect corporate environments, cloud applications, and sensitive information. You will also support pre-sales initiatives, contributing to the development of technology solutions aligned with clients' business needs and objectives.

• Design, implement, and review network security architectures, including next-generation firewalls (NGFW), network segmentation, VPN, and Zero Trust Network Access (ZTNA).
• Define and implement SASE/SSE architectures, integrating solutions such as Secure Web Gateway (SWG), ZTNA, CASB, Firewall as a Service (FWaaS), and SD-WAN.
• Implement, configure, and optimize security solutions from vendors such as Cisco, Palo Alto Networks, Fortinet, Check Point, Zscaler, Netskope, and Microsoft Defender for Cloud Apps.
• Develop and implement Data Loss Prevention (DLP) strategies, including data classification, policy definition, and integration with email, endpoints, cloud, and web environments.
• Implement Cloud Access Security Broker (CASB) solutions to identify unauthorized applications (Shadow IT), control SaaS application usage, and protect data in cloud environments.
• Conduct security architecture assessments, firewall rule reviews, and hardening activities, preparing technical reports and prioritized recommendations.
• Support pre-sales activities through discovery sessions, proof of concepts (PoCs), solution sizing, and technical proposal development.
• Present solutions, architectures, and business benefits to IT managers, architects, CISOs, and other stakeholders.
• Integrate security platforms with SIEM, SOAR, EDR, and identity management solutions.
• Develop technical documentation, deliver knowledge transfer sessions to clients, and contribute to the development of reusable solutions and assets.

Required Technical And Professional Expertise

• Solid experience in network security and infrastructure, with a proven track record in large-scale projects.
• In-depth knowledge of next-generation firewalls (NGFW), VPN, network segmentation, proxy, and DNS security.
• Hands-on experience with SASE/SSE solutions, including Cisco Umbrella, Secure Web Gateway (SWG), ZTNA, and CASB.
• Experience in DLP and CASB projects, including policy design, fine-tuning, and operations.
• Knowledge of networking protocols and technologies, including TCP/IP, BGP, TLS, DNS, and SD-WAN, as well as hybrid and multicloud environments.
• Ability to design security architectures, develop technical documentation, and deliver presentations to both technical and executive audiences.
• Professional proficiency in English.
• Ability to travel as required.

Preferred Technical And Professional Experience

Nice to Have

• Certifications such as CCNP Security, CCIE Security, CISSP, Palo Alto PCNSE, Fortinet NSE, Zscaler, or Netskope.
• Experience with Microsoft Purview, Symantec/Broadcom DLP, Forcepoint, or Digital Guardian.
• Experience migrating traditional VPN solutions to ZTNA and consolidating vendors within SSE environments.
• Experience with cloud security (AWS, Azure, GCP) and knowledge of CNAPP concepts.
• Knowledge of Brazil's LGPD, ISO 27001, PCI DSS, and NIST frameworks.
• Experience working on banking or financial services projects is a plus.