DDI Engineering & Automation Lead

Ford; India; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Ford in India seeks a Network Security Engineering Enterprise Architect to lead its global security architecture transformation. You will guide secure network design and automation across data centers, manufacturing plants, and remote users, focusing on ZTNA/SASE deployment and 24x7 availability.

The role requires deep expertise in firewalls, proxies, SD-WAN, and cloud security, plus hands-on scripting and collaboration with software teams and vendors worldwide.

Qualifications

• 12+ years of enterprise IT experience.
• 6+ years in large-scale network security engineering.
• Hands-on with Palo Alto Prisma Access, Cisco Umbrella, ZTNA, and SASE.
• Expertise in firewalls, proxies, DDI, and load balancing.
• Experience with DNS, DHCP, and IPAM.
• Strong knowledge of routing, switching, WAN, SD-WAN, and SDN.
• Experience with F5 load balancers, SSL offloading, and iRule development.
• Hands-on with Wireshark and Viavi Observer.
• Automation using scripting languages and APIs.
• Strong stakeholder management, communication, and cross-functional collaboration.

Responsibilities

• Lead network security architecture and engineering initiatives across global enterprise environments.
• Define and execute roadmaps for SASE, ZTNA, and cloud-delivered security services.
• Design, implement, and maintain secure solutions including firewalls, proxies, DDI, wireless security, and load balancing platforms.
• Drive automation initiatives to improve operational efficiency, scalability, and customer experience.
• Partner with Network Operations, Security Operations, Product Engineering, and external vendors to deliver secure services.
• Identify security vulnerabilities and lead remediation activities, including response to critical advisories and zero-day threats.
• Establish monitoring, observability, and reliability practices for 99.999% availability.
• Lead technical reviews, architecture assessments, and major incident response activities.
• Develop and maintain security standards, policies, and best practices.
• Provide technical leadership and mentorship to engineering teams across regions.

Skills

Network security engineering

Enterprise IT experience

Automation scripting

APIs

Stakeholder management

Cross-functional collaboration

Troubleshooting & diagnostics

Security event analysis

Zero Trust / SASE concepts

Education

Bachelor's degree in Computer Science, Engineering, Information Security, or related discipline

Tools

Palo Alto Prisma Access

Cisco Umbrella

F5 BIG-IP

DNS/DHCP/IPAM tools

Wireshark

Viavi Observer

iRule development

Job description

As Network Security Engineering Enterprise Architect (GSR8), based in India you will be a technical lead supporting Ford's complete Enterprise Network & Security architecture transformation. You will be taking care of dynamics for Network Security Engineering Products (Security Firewalls, Proxy, ISE, SDN Networks, Wireless) team to a center of technical excellence and customer Advocacy. You identify, analyze, and resolve existing network security design weaknesses and vulnerabilities which could possess risk to existing infrastructure. Expert in closing zero-day security vulnerabilities taking along all infrastructure domain teams which could impact Ford's reputation across globe. AS Network Security Engineering enterprise architect, you would lead future network security product development by contributing to the network Design (architecture)and Automation used across multiple Engineering Branches, Data Centers, Manufacturing Plants and Remote users. This Role requires defining road map for ZTNA/SASE deployment using Prisma Access/Cloud, setup support model, automation to accelerate end user experience. The Global Network Security Engineering enterprise architect is responsible for successful setup of the products by working closely with Software developers from Ford and OEMs in consultation with Fords Network and Security Operations Team. This position will be part of Ford's Enterprise Tech department and will report to the Regional Network Delivery Manager, based in same or another region. The lead needs to ensure 'Always On' (24 x 7) availability of Ford Global Network Product offerings, working with Network & Security Peers from other regions.

Responsibilities

• Lead network security architecture and engineering initiatives across global enterprise environments.
• Define and execute roadmaps for SASE, Zero Trust Network Access (ZTNA), and cloud-delivered security services.
• Design, implement, and maintain secure solutions including firewalls, proxies, DDI, wireless security, and load balancing platforms.
• Drive automation initiatives to improve operational efficiency, scalability, and customer experience.
• Partner with Network Operations, Security Operations, Product Engineering, and external vendors to deliver secure and reliable services.
• Identify security vulnerabilities and lead remediation activities, including response to critical security advisories and zero-day threats.
• Establish monitoring, observability, and reliability practices that support 99.999% service availability objectives.
• Lead technical reviews, architecture assessments, and major incident response activities.
• Develop and maintain security standards, policies, and best practices.
• Provide technical leadership, mentoring, and guidance to engineering teams across global regions.

Basic Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Security, or related discipline.
• 12+ years of enterprise IT experience.
• 6+ years of network security engineering experience in large enterprise environments.
• Hands-on experience with Palo Alto Prisma Access, Cisco Umbrella, Zero Trust Network Access (ZTNA), and Secure Access Service Edge (SASE) solutions.
• Strong expertise in enterprise network security architecture, firewalls, intrusion prevention systems, and proxy technologies.
• Experience with DNS, DHCP, and IP Address Management (DDI) platforms.
• Strong knowledge of routing, switching, wireless technologies, WAN, SD-WAN, and software-defined networking.
• Experience with F5 load balancers, SSL offloading, virtual servers, and iRule development.
• Hands-on experience with network troubleshooting and packet analysis tools such as Wireshark and Viavi Observer.
• Experience driving automation using scripting languages and APIs.
• Strong stakeholder management, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Palo Alto, Cisco, or F5 certifications.
• Knowledge of cloud networking and cloud security architectures.
• Experience with Ansible, Terraform, Python, or network automation frameworks.
• Experience implementing observability and Site Reliability Engineering (SRE) practices.

#LI-MF2