- Fri Dec 05, 2025 12:31 pm#10377
PREPARING FOR THE POSITION
ASSOCIATE MANAGER / MANAGER – CORE NETWORK & PERIMETER SECURITY
BRAC BANK PLC (Dhaka)
1. UNDERSTAND THE ORGANISATION AND ITS CULTURE
• Study BRAC Bank’s mission, vision and values – focus on “trusted, innovative and inclusive banking” and the emphasis on sustainability, good governance and ethics.
• Review recent annual reports, sustainability reports and press releases to know current initiatives, especially those related to technology and digital transformation.
• Familiarise yourself with Bangladesh Bank regulations and ISO standards that the bank follows (ISO‑27001, ISO‑20000, etc.).
2. ANALYZE THE ROLE – KEY RESPONSIBILITIES
• Network infrastructure planning for Data‑Center/DR, campus and regional networks – be ready to discuss capacity planning, high‑availability design, and redundancy.
• Operation of security devices (firewall, IPS) – know rule‑base management, logging, alert handling and device hardening.
• Proxy, DNS, TACACS, VPN OTP/2FA – understand installation, configuration, and troubleshooting of these services on Linux platforms.
• Site‑to‑Site and Remote Access VPN – be comfortable with IPsec, SSL‑VPN, tunnel monitoring and fail‑over.
• Logical security posture – practice explaining protocol hardening (BGP, OSPF, DHCP, SNMP), traffic‑flow controls and segmentation.
• Partner connectivity integration – review common practices for MPLS, Ethernet‑WAN, and cross‑border links.
• Monitoring tools (Cacti, IPAM, RANCID, etc.) – set up a lab to collect metrics, generate alerts and produce reports.
• Documentation – prepare examples of SOPs, change‑management logs and network diagrams you have created.
• Vendor/OEM coordination – recall experiences negotiating SLAs, handling escalations and tracking equipment warranties.
3. BUILD TECHNICAL COMPETENCY
A. CORE NETWORK KNOWLEDGE
– Switches & routers (Cisco IOS, Nexus, Juniper).
– Routing protocols (BGP, OSPF, EIGRP) and their security best practices.
– VLAN design, STP, LACP, QoS.
B. PERIMETER & NETWORK SECURITY
– Next‑generation firewalls (FortiGate, Palo Alto, Cisco ASA).
– Intrusion Prevention Systems (Snort, Suricata).
– NAT, ACLs, zone‑based policies, SSL inspection.
C. SYSTEMS & AUTOMATION
– Linux administration (Red Hat/CentOS).
– Scripting (Python, Bash, PowerShell) for routine tasks – e.g., automated config backups, log parsing, API calls to firewalls.
– Familiarity with Ansible or Terraform for network device provisioning is a plus.
D. SERVICE INFRASTRUCTURE
– DNS (BIND, Microsoft DNS) – zone management, DNSSEC.
– DHCP, IP Address Management (Infoblox, phpIPAM).
– Proxy servers (Squid, Blue Coat) and content filtering.
E. HIGH‑AVAILABILITY & DR
– Understanding of data‑center clustering, VRRP/HSRP, and disaster‑recovery site design.
F. CERTIFICATIONS (obtain or renew)
– CCNA / CCNP (Routing & Switching).
– CCNP Security or Cisco Certified CyberOps Associate.
– Fortinet NSE 4 or Palo Alto PCNSE.
– CompTIA Security+, Linux+ or Red Hat RHCSA.
– (Optional) Certified Network Defender (CND) or ISO‑27001 Lead Implementer.
4. CREATE A TARGETED RESUME & COVER LETTER
• Highlight at least 5 years of relevant experience, mentioning specific technologies listed above.
• Quantify achievements – e.g., “Reduced VPN latency by 30 % through MPLS optimisation” or “Implemented automated firewall rule cleanup saving 12 hours/month”.
• Include certifications, relevant projects and any experience with Bangladesh Bank compliance.
• Use clear headings: Professional Summary, Core Competencies, Experience, Certifications, Education, Projects, Publications (if any).
5. PREPARE FOR THE INTERVIEW
A. TECHNICAL QUESTIONS
– Expect scenario‑based queries: “How would you design a secure site‑to‑site VPN between a branch and the data‑center?”
– Be ready to troubleshoot live examples: a firewall policy causing traffic drop, DNS resolution failure, VPN tunnel flapping.
– Prepare brief demos of scripting (e.g., a Python script that pulls firewall logs via API).
B. BEHAVIOURAL QUESTIONS
– Emphasise user‑centric mindset: give examples of how you translated business requirements into technical solutions.
– Demonstrate proactive problem‑solving: describe a time you identified a latent network risk before it impacted services.
– Show teamwork and vendor‑management skills: illustrate coordination with OEMs for device firmware upgrades.
C. QUESTIONS TO ASK THE INTERVIEWERS
– “What are the current challenges in the bank’s network security roadmap?”
– “How does the technology division align with the bank’s sustainability goals?”
– “What automation initiatives are planned for the next 12‑18 months?”
6. SET UP A PRACTICAL LAB (HOME OR CLOUD)
• Deploy virtual routers/switches (GNS3, EVE‑NG) and firewalls (FortiGate VM, Palo Alto VM).
• Configure a DNS server, a proxy, and a VPN gateway.
• Practice hardening steps: disable unused services, enforce strong ciphers, enable logging.
• Use monitoring tools (Cacti, LibreNMS) to collect performance data.
7. STAY UPDATED ON INDUSTRY TRENDS
– Follow reputable sources: Network World, Dark Reading, Cisco Blog, Fortinet Blog.
– Subscribe to security mailing lists (CVE, NVD) to discuss recent vulnerabilities relevant to firewalls and VPNs.
– Join local professional groups or LinkedIn communities focused on Bangladeshi banking IT.
8. LOGISTICS & FINAL CHECKS
• Verify the application deadline (13 December 2025) and submit the tailored resume and cover letter through the online portal.
• Keep copies of all certificates and a portfolio of documentation (SOPs, diagrams) in PDF format ready for upload if requested.
• Prepare a professional outfit suitable for a corporate interview in Dhaka.
• Ensure you have a reliable internet connection and a quiet space for any virtual interview rounds.
By following the steps above you will align your knowledge, experience and presentation with the expectations of BRAC Bank’s Technology Division and increase your chances of securing the Associate Manager / Manager – Core Network & Perimeter Security role. Good luck!
ASSOCIATE MANAGER / MANAGER – CORE NETWORK & PERIMETER SECURITY
BRAC BANK PLC (Dhaka)
1. UNDERSTAND THE ORGANISATION AND ITS CULTURE
• Study BRAC Bank’s mission, vision and values – focus on “trusted, innovative and inclusive banking” and the emphasis on sustainability, good governance and ethics.
• Review recent annual reports, sustainability reports and press releases to know current initiatives, especially those related to technology and digital transformation.
• Familiarise yourself with Bangladesh Bank regulations and ISO standards that the bank follows (ISO‑27001, ISO‑20000, etc.).
2. ANALYZE THE ROLE – KEY RESPONSIBILITIES
• Network infrastructure planning for Data‑Center/DR, campus and regional networks – be ready to discuss capacity planning, high‑availability design, and redundancy.
• Operation of security devices (firewall, IPS) – know rule‑base management, logging, alert handling and device hardening.
• Proxy, DNS, TACACS, VPN OTP/2FA – understand installation, configuration, and troubleshooting of these services on Linux platforms.
• Site‑to‑Site and Remote Access VPN – be comfortable with IPsec, SSL‑VPN, tunnel monitoring and fail‑over.
• Logical security posture – practice explaining protocol hardening (BGP, OSPF, DHCP, SNMP), traffic‑flow controls and segmentation.
• Partner connectivity integration – review common practices for MPLS, Ethernet‑WAN, and cross‑border links.
• Monitoring tools (Cacti, IPAM, RANCID, etc.) – set up a lab to collect metrics, generate alerts and produce reports.
• Documentation – prepare examples of SOPs, change‑management logs and network diagrams you have created.
• Vendor/OEM coordination – recall experiences negotiating SLAs, handling escalations and tracking equipment warranties.
3. BUILD TECHNICAL COMPETENCY
A. CORE NETWORK KNOWLEDGE
– Switches & routers (Cisco IOS, Nexus, Juniper).
– Routing protocols (BGP, OSPF, EIGRP) and their security best practices.
– VLAN design, STP, LACP, QoS.
B. PERIMETER & NETWORK SECURITY
– Next‑generation firewalls (FortiGate, Palo Alto, Cisco ASA).
– Intrusion Prevention Systems (Snort, Suricata).
– NAT, ACLs, zone‑based policies, SSL inspection.
C. SYSTEMS & AUTOMATION
– Linux administration (Red Hat/CentOS).
– Scripting (Python, Bash, PowerShell) for routine tasks – e.g., automated config backups, log parsing, API calls to firewalls.
– Familiarity with Ansible or Terraform for network device provisioning is a plus.
D. SERVICE INFRASTRUCTURE
– DNS (BIND, Microsoft DNS) – zone management, DNSSEC.
– DHCP, IP Address Management (Infoblox, phpIPAM).
– Proxy servers (Squid, Blue Coat) and content filtering.
E. HIGH‑AVAILABILITY & DR
– Understanding of data‑center clustering, VRRP/HSRP, and disaster‑recovery site design.
F. CERTIFICATIONS (obtain or renew)
– CCNA / CCNP (Routing & Switching).
– CCNP Security or Cisco Certified CyberOps Associate.
– Fortinet NSE 4 or Palo Alto PCNSE.
– CompTIA Security+, Linux+ or Red Hat RHCSA.
– (Optional) Certified Network Defender (CND) or ISO‑27001 Lead Implementer.
4. CREATE A TARGETED RESUME & COVER LETTER
• Highlight at least 5 years of relevant experience, mentioning specific technologies listed above.
• Quantify achievements – e.g., “Reduced VPN latency by 30 % through MPLS optimisation” or “Implemented automated firewall rule cleanup saving 12 hours/month”.
• Include certifications, relevant projects and any experience with Bangladesh Bank compliance.
• Use clear headings: Professional Summary, Core Competencies, Experience, Certifications, Education, Projects, Publications (if any).
5. PREPARE FOR THE INTERVIEW
A. TECHNICAL QUESTIONS
– Expect scenario‑based queries: “How would you design a secure site‑to‑site VPN between a branch and the data‑center?”
– Be ready to troubleshoot live examples: a firewall policy causing traffic drop, DNS resolution failure, VPN tunnel flapping.
– Prepare brief demos of scripting (e.g., a Python script that pulls firewall logs via API).
B. BEHAVIOURAL QUESTIONS
– Emphasise user‑centric mindset: give examples of how you translated business requirements into technical solutions.
– Demonstrate proactive problem‑solving: describe a time you identified a latent network risk before it impacted services.
– Show teamwork and vendor‑management skills: illustrate coordination with OEMs for device firmware upgrades.
C. QUESTIONS TO ASK THE INTERVIEWERS
– “What are the current challenges in the bank’s network security roadmap?”
– “How does the technology division align with the bank’s sustainability goals?”
– “What automation initiatives are planned for the next 12‑18 months?”
6. SET UP A PRACTICAL LAB (HOME OR CLOUD)
• Deploy virtual routers/switches (GNS3, EVE‑NG) and firewalls (FortiGate VM, Palo Alto VM).
• Configure a DNS server, a proxy, and a VPN gateway.
• Practice hardening steps: disable unused services, enforce strong ciphers, enable logging.
• Use monitoring tools (Cacti, LibreNMS) to collect performance data.
7. STAY UPDATED ON INDUSTRY TRENDS
– Follow reputable sources: Network World, Dark Reading, Cisco Blog, Fortinet Blog.
– Subscribe to security mailing lists (CVE, NVD) to discuss recent vulnerabilities relevant to firewalls and VPNs.
– Join local professional groups or LinkedIn communities focused on Bangladeshi banking IT.
8. LOGISTICS & FINAL CHECKS
• Verify the application deadline (13 December 2025) and submit the tailored resume and cover letter through the online portal.
• Keep copies of all certificates and a portfolio of documentation (SOPs, diagrams) in PDF format ready for upload if requested.
• Prepare a professional outfit suitable for a corporate interview in Dhaka.
• Ensure you have a reliable internet connection and a quiet space for any virtual interview rounds.
By following the steps above you will align your knowledge, experience and presentation with the expectations of BRAC Bank’s Technology Division and increase your chances of securing the Associate Manager / Manager – Core Network & Perimeter Security role. Good luck!
