Network security - L3/L4

Exp : 15yrs to 20yrs

Seasoned Network & Security Architect/SME typically focuses on designing, implementing, and maintaining secure network infrastructure, including firewalls, Routers, Switches ,LB ,Wireless etc. Primarily into Network security and should have secondary knowledge in Routing ,Switching &Wireless at LAN/WAN/DC/DR /Cloud etc.

Responsibilities include identifying assessing risks, developing security policies, and responding to Network security incidents.

Key Responsibilities Not limited to:

Develop and implement robust security architectures for various IT projects, including networks, firewalls, routers, and other network devices.

Work closely with Operational teams & make sure L3/L4 escalation support is provided for Bank users by following Incident/Change/Problem management policies on daily basis.

Lead efforts in responding to security breaches or attacks, including incident investigation, containment, and recovery.

Provide guidance and training to Network/security Junior team members on security protocols and best practices.

Create and enforce security policies and guidelines, ensuring compliance with industry standards and regulations

Remain informed about the latest security threats, vulnerabilities, and technologies.

Work closely with SOC, Governance & IAD team to be compliance with various auditing/Industry standards like PCI&DSS/RBI CSITE/ISO27001/ITIL

Be Network spoc during DC-DR migration of critical & Non critical applications periodically.

Conduct Review meetings with OEM & Vendor partners to maintain seamless service as per SLA.

Additional Skills and Knowledge:

Deep understanding of network protocols, including TCP/IP, EIGRP/OSPF,BGP,VOIP.

Familiarity with various security technologies, including firewalls, intrusion detection systems, intrusion prevention systems, VPNs, and endpoint security solutions.

Ability to assess and manage security risks, including identifying potential threats, developing mitigation strategies, and implementing security controls.

Strong communication and leadership skills to effectively communicate security risks and vulnerabilities to stakeholders and to lead security teams.

Ability to troubleshoot security issues and to develop solutions to address security vulnerabilities.

Network & Security Knowledge on Public Cloud like AWS/Azure/OCI.

Bank experience would add more value.

Below are the technologies Bank is Managed with

• Firewall – Palo Alto, Check Point, Cisco Firepower, FortiGate

• Routing – OSPF, EIGRP, BGP(Cisco & Fortinet(SDWAN))

• Switching – Cisco ,Nexus switches ,Aruba Switches and all switching protocols

• Load Balancing – F5

• NAC – Forescout Counter Act

• AAA – Cisco ISE, Radius, TACAC’s

• VPN – Site to Site, Dynamic over Routing protocols, Remote Access, GRE

• Wireless – Enterprise Cisco, Aruba, Ruckus and Controllers

• QoS, Packet Shapers, WAN Optimization

• Packet Analysis tools – Wireshark, Riverbed

• Monitoring – SolarWinds, NetFlow tech

• WAN –SDWAN/MPLS/P2P