Network & IT Security Engineer

Core Role & Scope

• Network & IT Security Engineer
• Corporate network, cloud perimeter, Apple-heavy device fleet
• Policy design, tool administration, incident response, compliance readiness
  

Key Responsibilities

• Secure Network Architecture:

  LAN, WAN, VPN, VLAN, Firewalls (Fortinet, Palo Alto, pfSense), Zero-Trust, SASE, Netskope (SWG, CASB, ZTNA, DLP)

• Identity & Endpoint Management:

  JumpCloud (SSO, MFA, conditional access, device trust), Apple Business Manager (DEP, VPP, ABM/ADM), MDM (Kandji, Jamf)

• Threat Detection & Incident Response:

  SIEM (Splunk, Elastic, SentinelOne), log forwarding, incident triage, RCA, playbooks, MTTD/MTTR less than 30 mins

• Vulnerability & Patch Management:

  CVE analysis, patch rollouts, remediation metrics

• Automation & Documentation:

  Scripting (Python, Bash), IaC (Terraform, Ansible), SOPs, runbooks, security awareness

• Compliance & Audit:

  ISO 27001, SOC 2, RBI IT-security controls

Must-Have Skills

• Enterprise network & security (68 yrs)
• Netskope (policy creation, client steering, DLP)
• JumpCloud (directory & device management)
• Apple fleet management (ABM/ADM, remote wipe)
• TCP/IP, routing, VPN (IPsec, WireGuard), TLS, DNSSEC
• SIEM (Splunk, Elastic, SentinelOne)
• Scripting: Python, Bash, Git
  

Nice-to-Have Skills

• JAMF, Kandji, Intune (MDM platforms)
• AWS/Azure security (VPC, SG/NACL, TGW, WAF)
• Certifications: CCNA Security, CISSP, CCSP, NSE 4/5, CompTIA Security+
• Zero-Trust segmentation, micro-segmentation
  

Success Metrics

• 99.9% network & VPN uptime
• less than 30 min MTTD/MTTR for P1 incidents
• 0 critical vulnerabilities
• Clean ISO 27001/SOC 2 audit sign-offs

Key Skills:

Network Security, IT Security, LAN, WAN, VPN, VLAN, Firewalls (Fortinet, Palo Alto, pfSense), Zero Trust, SASE, Netskope (SWG, CASB, ZTNA, DLP), Identity and Access Management, JumpCloud (SSO, MFA, Conditional Access, Device Trust), Apple Business Manager (ABM/ADM, DEP, VPP), Mobile Device Management (MDM), Jamf, Kandji, Intune, Threat Detection, Incident Response, SIEM (Splunk, Elastic, SentinelOne), Log Analysis, Root Cause Analysis (RCA), Playbooks, Vulnerability Management, Patch Management, CVE Analysis, Remediation, Python, Bash, Terraform, Ansible, Git, ISO 27001, SOC 2, RBI IT Security Compliance, Cloud Security (AWS, Azure, VPC, Security Groups, NACL, Transit Gateway, WAF), CCNA Security, CISSP, CCSP, NSE 4/5, CompTIA Security+