Lead Network, Infra & Cloud Security

Company Name:

Job Title:

Experience:

Location:

Work Mode:

Salary:

Employment Type:

Role Overview

The Lead – Network, Infra & Cloud Security oversees end-to-end protection of enterprise networks, servers, and cloud workloads. The role designs, implements, and governs controls across firewalls, IDS/IPS, WAF, VPN, email, and endpoint security, while driving hardening and configuration audits. It guides deployment of data security solutions such as DLP, data classification, IRM/DRM, PAM, and O365 protections, integrating with AD/ADFS, CASB, DNS security, and MDM. The position partners with infrastructure and application teams to reduce risk, tune security policies, and respond to emerging threats. It also standardizes processes in line with frameworks like ISO 27001 and supports audit readiness.

Required Qualifications

• Extensive hands-on experience with network security: Firewalls, IDS/IPS, WAF, VPN
• Strong knowledge of server and network security hardening (CIS/NIST benchmarks) and configuration audits
• Experience with endpoint/AV security and email security gateways
• Active Directory/ADFS security and administration
• Experience with CASB and O365/M365 security controls
• Implementation exposure to data security tools: IRM/DRM, Data Classification, DLP, PAM
• Knowledge of DNS security controls and MDM/UEM
• Understanding of cloud security concepts and integration with on-prem controls
• Relevant certifications: ISO 27001 (LA/LI), MCSE, CCNA, CISA, CISM (preferred)

Responsibilities

• Lead design, deployment, and tuning of network security controls (firewalls, IDS/IPS, WAF, VPN)
• Own server and network security hardening; plan and execute configuration audits and remediation
• Implement and govern data protection solutions (classification, IRM/DRM, DLP) across endpoints, email, web, and cloud
• Define and operate PAM for privileged accounts; integrate with AD/ADFS and enforce least privilege
• Strengthen O365/M365 security posture with policies for email, collaboration, and data loss prevention
• Implement and manage CASB and DNS security; oversee MDM/UEM for mobile and remote endpoints
• Coordinate incident response for infra/network/cloud security events and drive root-cause remediation
• Develop security standards, runbooks, and compliance mappings aligned to ISO 27001 and industry benchmarks
• Collaborate with infra, cloud, and application teams; provide leadership and mentorship to security engineers
• Report on security KPIs, risk posture, and audit status to stakeholders