Network Security Engineer

Profile Requirement

Job Role & Responsibilities

• To ensure optimal performance and reliability, develop and implement network designs, including topology, protocols, and network security measures.
• Regularly monitor network systems and proactively identify and resolve network issues to minimize downtime and ensure smooth operations.
• Implement and maintain network security measures, such as firewalls, intrusion detection systems, and access controls, to protect sensitive data from unauthorized access and cyber threats.
• Lead and manage a team of network professionals, providing guidance, training, and support to ensure they perform their roles effectively and efficiently.
• Maintain accurate and up-to-date documentation of network configurations, diagrams, processes, and procedures to facilitate troubleshooting, maintenance, and future network enhancements.
• Write business requirement document and define technical scope of work for successful execution of the project.
• Coordinate with various customer teams to understand overall requirement & trends in banking industry domain.
• Experience building network strategy for public/private cloud adoption and movement from on-premise to hybrid based networks.
• Have deep understanding of customer needs and design & recommend appropriate solutions.
• Experience working with IT and Network leadership to articulate network and/or compliance strategies and plans and in develop value based customer proposals.
• Ability to compose compelling, persuasive technical requirement document, solutions, scope of work, bill of material/quantity and commercial models that are passionate about addressing customer business/technical problems
• Understanding client business process operations and business objectives; utilize knowledge on engagements/ analyzing workflow to design solutions (As-Is and To-Be Analysis and Freezing).
• Understanding business environment of the client and positioning appropriate solution and articulating business values presentations.
• Demonstrated effectiveness across multipe technologies. Be independently able to lead, defining scope of work & service levels, technical specifications, bill of quantity/material.
• Client business requirements gathering and analysis, solution architecting, designing, deployment architecture, negotiation with OEMs/Vendors, technical compliance and Vendor Interlocks.
• Understanding nuances of OEM/Vendor platforms and solutions – hardware, software, licensing and ability to decide on a specific OEM/Vendor based on technical requirements and work with OEM/Vendors in finalizing solution components, prepare BoQ/BoM along with OEM/Vendor
• Ownership of change request and incidents to determine root cause.
• Identification and mitigate various security threats Maintaining internal IT System in adherence with policies and standards
• Play the role of verifier of configuration/architectural changes by other teams
• Responsible for resolving escalated issues and risks with firm mitigation plans and escalate outstanding issues if required
• Responsible for identifying needs for implementing new processes and analyse project trends to improve and optimize existing processes. Ensure both new and existing processes are being-followed.
• Ensuring that all the audits findings are closed within given time and providing proofs (that can be shown to the auditor) to the Bank
• Assisting the design team while designing the architecture for new branches such that all the security best practices are in place from day one.
• Ensuring that all the network devices are configured as per the Bank’s security policy, best practices to ensure Secured Network Architecture.
• Assisting Senior support tiers with project-based configuration and deployment work
• Offsite technical implementation, installation, and configuration of hardware when required
• All the escalations were done by L2 engineers.

Qualifications

• BE/B.Tech with 15-20 years of working as a network security engineer or solution architect for a Network services complany, with emphasis on Infrastructure services and deep knowledge in overall networking & security with emphasis on Data Center in banking industry.
• Experience in design & delivering network projects specifically in the area of DC/Cloud , Infrastructure security, and preferred experience in new deployment models and architectures such as SDN, Virtualization, Network security etc.

Certifications

Applicant should have professional certifications (or equivalent) – CCDP, CCDE, CCIE Data Center, CCIE Routing and Switching, CCIE Service Provider, Juniper JNCIE-DC Juniper JNCIE-SP

• Good to have any additional certifications related to network security such as Fortigate, Palo Alto, Checkpoint etc.
• TOGAF or ZACHMAN or SABSA Enterprise Architecture certification would be preferred.

Skills

• Good understanding of OSI layer, TCP/IP stack, TCP, UDP operation
• Good knowledge of multi-vendor network products - Switches, Routers, Firewalls & Load balancers
• Strong Understanding & hands on experience of Data Center Networking technologies – OTV, BGP EVPN, LISP, VXLAN, NVGRE, VPC, Spanning tree (MSTP), best practice Data Center Fabric designs, Etherchannel, Cisco FEX/Juniper Fusion, Policy based routing, SLB/GSLB (E.g., F5, Radware etc)
• Strong Understanding & hands on experience of DC network security stack – Firewalls, NGFW, Threat Protection (either Fortigate, Checkpoint, Cisco ASA, FTD)
• Understanding & hands on experience of SDN DC Networking concepts like Cisco ACI, Juniper Contrail.
• Understanding & hnds on experience of Fabric switching like Cisco Nexus 9000/7000/5000, Juniper QFX 5200/10000 series, Arista family etc.
• Migration of traditional DC Fabrics to SDN enabled such as Cisco ACI/Juniper Contrail.
• Understanding and Working knowledge on Layer 3 following technologies – IPv4, IPv6, ARP, Routing protocols - OSPF, BGP, Multicast, Layer-2 & 3 MPLS, AAA
• Good understanding on Datacenter Network Transformation
• Knowledge of virtualization, storage and data base technologies Hypervisor – ESXi, KVM, Virtual switches, SAN/NAS, SAP HANA.
• Understanding of various applications used in banking industry – CBS, UPI, IMPS, RTGS, SWIFT, LOC, LMS, etc.
• Working Knowledge of cloud technologies and solutions including public, private and hybrid cloud. Specific public cloud knowledge includes
• AWS concepts – VPC, Direct connect, Elastic storage S3, Amazon compute services EC2
• Azure Concepts – ExpressRoute, Azure Office 365, Familiarity of Azure compute services
• Good understanding of applications – HTTPS, SSL/TLS, FTP and network relation with applications
• Good understanding of business applications used in enterprise networks and network relevance to effective operation of business apps – Core Banking, ERP, CRM, e-mail, VC, real-timeus
• Good understanding of various enterprise market segments need of IT – SMB, large enterprise, government sectors and industry verticals – manufacturing, healthcare, bio-tech and pharmaceuticals, media, education, energy, BFSI, retail
• Working knowledge on system/network integration (SI/NI) capabilities
• Strong oral, written, communication, documentation and presentation skills
• Should have a strong business acumen to understand complex business requirements of different enterprise client
• Knowledge of ITIL concepts.
• Must have ability to support flexible schedule in support of 7x24 operations.