NetSecOps Tech Lead

Purpose of the Role The ICRC is seeking an experienced NetSecOps Tech Lead to automate, secure and modernize the network and network security services that connect ICRC data centers, regional hubs and field delegations, in support of the ICRC’s mandate of protecting and assisting victims of armed conflict and other situations of violence. The NetSecOps Tech Lead brings an open-source-first engineering approach to Technology Foundations, covering Infrastructure as Code, GitOps, Kubernetes-based platforms and AI-assisted operations. They are the technical reference for automation and open-source adoption on network and security topics, set engineering standards, and act as the bridge between network engineering, DevOps, security and operations. Main Duties & Responsibilities Own the network and security automation strategy: Infrastructure as Code (Terraform, Ansible) and GitOps workflows covering firewall, ZTNA, SD-WAN, DNS/IPAM and load-balancing configuration, delivered through peer-reviewed, tested and auditable pipelines on Azure DevOps (validation, drift detection, rollback). Adopt and operate open-source network and security solutions (e.g. OPNsense) where they are a sound alternative or complement to proprietary products, and provide build-versus-buy, risk and total-cost-of-ownership input to the Network team and the architects. Secure and automate networking for Kubernetes and container platforms (including OpenShift): CNI selection and policy, network policies and micro-segmentation, ingress/egress control, service connectivity and certificate lifecycle. Build network-as-code foundations: a network source of truth, configuration generation from data models, API-driven integrations with network and security platforms, and pre-production validation. Embed security into automation (DevSecOps for network code): policy-as-code, IaC and container scanning, secrets and PKI integration with OpenBao, and SBOM and CVE triage for the open-source components in use. Provide observability for network and security services: open-source telemetry and monitoring (e.g. Grafana), alerting integration and actionable dashboards for the Network and Security teams.