About The Company
Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications
Network Operations & Support - Linux firewall engineer
Experience: 6-8 Years Location: Chennai/Bangalore
Role Summary
We are looking for a skilled Distributed Perimeter (Linux Firewall Engineer) to design, build and operate secure Linux-based perimeter controls. The role requires strong hands-on experience with NixOS, nftables, and proxy technologies, along with modern networking, container networking, and security observability tools such as Cilium, Suricata, and Zeek. The engineer will be responsible for implementing declarative, scalable, and security-focused Linux infrastructure. Additionally, the ideal candidate should possess advanced-level expertise in Red Hat Enterprise Linux (RHEL), including system administration, hardening, performance tuning, automation, and security management. The candidate should have proven experience managing large-scale RHEL deployments, integrating security controls, and ensuring high availability and compliance across distributed infrastructures.
Key Responsibilities
-
Install, configure, and maintain Linux systems in production environments
-
Design and implement distributed perimeter security using Linux firewall and proxy technologies
-
Build and manage systems using NixOS (MUST) with declarative configuration principles
-
Implement and troubleshoot Linux firewall rules using nftables (MUST)
-
Deploy, configure, and manage proxy solutions, including: o Squid Proxy (MUST) o Sproxy
-
Enforce inbound and outbound traffic control using firewall and proxy policies
-
Deploy and support Cilium for container networking, security, and observability
-
Configure and operate network security and visibility tools, including: o Suricata (IDS/IPS) o Zeek (network traffic analysis)
-
Monitor system and network behavior, troubleshoot incidents, and perform root cause analysis
-
Ensure system hardening, security compliance, and best practices
-
Collaborate with Security, Platform, and DevOps teams on perimeter and network security improvements
-
Document firewall rules, proxy configurations, and operational procedures
-
Mandatory Skills & Experience:
-
4+ years of hands on Linux administration / engineering experience
-
Strong experience with NixOS (MUST)
-
Strong hands on experience with nftables (MUST)
-
Hands on experience with Squid Proxy (MUST)
-
Experience working with Sproxy
-
Strong understanding of Linux networking fundamentals (TCP/IP, routing, packet flow)
-
Experience implementing firewall and proxy based security controls in production
-
Good troubleshooting and incident handling skills
-
Required / Core Skills:
-
Experience with Cilium for container networking and security
-
Familiarity with Suricata for intrusion detection/prevention
-
Familiarity with Zeek for network traffic analysis and visibility
-
Understanding of distributed or zero trust perimeter concepts
-
Scripting skills (Bash required; Python preferred)
-
Preferred Skills:
-
Experience with Kubernetes or containerized environments
-
Exposure to observability, logging, or SIEM integrations
-
Experience working in high availability or large scale Linux environments
-
Security focused Linux deployments
-
Other Qualification and requirement:
-
Any degree or relevant education is must. This role requires working at customer locations based on business needs.
