NetSecOps Expert (PKI, WAF & Reverse Proxy)

"Why work for Accor?
We are far more than a worldwide leader. We welcome you as you are and you can find a job and brand that matches your personality. We support you to grow and learn every day, making sure that work brings purpose to your life, so that during your journey with us, you can continue to explore Accor’s limitless possibilities.
By joining Accor, every chapter of your story is yours to write and together we can imagine tomorrow's hospitality. Discover the life that awaits you at Accor, visit https://careers.accor.com/
Do what you love, care for the world, dare to challenge the status quo! #BELIMITLESS"

You will manage and modernize Accor’s web security platforms (Reverse proxy, WAF, and Certificate Management) across Cloud and on-prem environments, ensuring secure exposure of digital services. Working with infrastructure, cloud, and application teams, you will drive transformation initiatives, migrate legacy components toward next-generation solutions, and align web perimeter security with regulatory and risk management requirements. Your role includes modernizing the certificate management platform, strengthening WAF and reverse proxy security policies and maintaining a resilient web perimeter posture that anticipates threats and delivers seamless user experiences.

Web Perimeter Security Operations and Enhancement:

• Continuously improve WAF and Reverse Proxy coverage, strengthen the protection of web-facing applications and reduce their exposure to cyber threats ensuring alignment with Accor’s cybersecurity strategy.
• Enhance threat detection and bot management capabilities by refining detection rules and tuning behavioral policies to reduce false positives and improve response accuracy.
• Define and improve certificate lifecycle management processes and implement robust monitoring to prevent service disruptions and security gaps.

Project support, and operational alignment:

• Drive the PKI modernization project from architecture definition to implementation across Cloud and on-prem environments, embedding automated certificate lifecycle processes to address the reduction of public certificate lifespans and prevent manual intervention risks. 
• Collaborate with application teams to assess exposure risks, enforce WAF security policies, and ensure adequate protection of internet-facing assets.
• Provide expert support in critical incidents, root-cause analysis, and complex troubleshooting.

Standards, documentation, and continuous improvement:

• Produce and maintain expert-level documentation, including hardened WAF and Reverse Proxy configuration baselines, certificate management procedures, and advanced troubleshooting playbooks.
• Ensure consistent enforcement of web perimeter security standards across all environments, including Cloud-native services and legacy infrastructures.
• Maintain expert awareness of emerging trends in WAF, certificate management, and edge security technologies, and anticipate their relevance and adoption within Accor's infrastructure landscape.
• Regularly propose innovative enhancements to reinforce infrastructure resilience, adapt to evolving business requirements, and stay ahead of emerging cyber threats.

• Bachelor's degree or higher in Computer Engineering or technology field.
• At least 5 years of experience as a security engineer or network, with a strong focus on web perimeter security and certificate management.
• Security industry certifications and/or security vendors specific trainings are a plus.

Required Technical Skills and Knowledge:

• WAF and reverse Proxy (Imperva, F5..)
• Certificate management (ADCS, Venafi..)
• Network and Firewalling (Palo Alto, Checkpoint, Tufin..)
• Cloud Security (AWS)
• Secure architecture design
• Compliance and standards
• Automation and scripting

Soft Skills:

• Analytical Thinking: Ability to analyze complex issues and quickly devise effective solutions fitting the business context. Attention to details.
• Communication: Excellent communication skills to convey technical information to both technical and non-technical stakeholders.
• Proactive Approach: A problem-solving mindset with a proactive approach to identify and address security challenges.
• Collaboration: Strong teamwork and collaboration skills to work effectively across departments.
• Continuous Learning: Eagerness to stay updated with the latest security trends and technologies.

• This position is based in Bangkok

• The role involves global collaboration, requiring flexibility to accommodate time zone differences.