Sr. Lead - Network Security Engineer

Position : Sr. Lead - Network Security Engineer

Location : Pune

Reporting to the Network Manager, the Security Engineer is seen as a technical expert in networking security.

This is a technical and hands on role, with a primary focus on design and implementation of network security change; although you will be expected to support the network security operations team with complex troubleshooting of issues as required.

You will have experience of working in high impact, mission critical environments where service matters and exceeding expectations is the norm.

Key responsibilities

The Security Engineer's primary areas of responsibility include ensuring there are defined standards in place, manage the technical lifecycle of products and services and deliver change/transformation against created designs; always ensuring a smooth transition/handover to Network Operations.

Responsible for defining and documenting Network Security Standards

Responsible for the creation of Low Level Design documents to meet requirements outlined in the High Level Design

Responsible for the creation of detailed Implementation Plans for all engineering related activity

Responsible for Procurement activities relating to build and delivery of new services (Project)

Responsible for ensuring the smooth Transition/Handover to Operations in line with agreed Operational Acceptance Process

Responsible for managing Technical Lifecycle Management for all Network & Communications services

Responsible for supporting Architecture in creation and upkeep of a Delivery Roadmap for Network Security

Responsible for supporting the Architecture in scoping activities required to produce the High Level Design

Responsible for supporting Architecture in undertaking Proof of Concept activities

Responsible for ensuring skillsets are relevant and up to date in order to deliver change and provide a high level of support

Responsible for providing escalation support to Operations with complex troubleshooting of Major Incidents as required

Provide on call escalation support (rota basis) and work extended hours as and when required

Core Skills & Experience

Total 12+ years of experience required.

Minimum 8 years hands on experience of network security solutions within a global enterprise scale organization (5,000-50,000 users) with both traditional datacenters and Cloud.

You will have considerable first-hand experience of design engineering and building resilient and scalable security solutions, ideally within finance or investment banking.

You understand cybersecurity principles, global financial services business models, as well as regional compliance standards, relevant local regulations, and applicable laws

You understand the concepts of risk and compliance and how to translate these into effective security solutions.

You will have an appreciation of automation and orchestration and will have experience of scripting against an API

You have a strong understanding of Layer 2, Layer 3 & Layer 4-7 network and security technologies.

You will be familiar with a variety of testing tools, networking technologies and techniques to accurately troubleshoot and resolve complex technical problems associated with the service, application and network hardware and software.

Technical Skills & Experience

You will have expert knowledge and experience in several of the following areas:

F5 LTM, GTM, Velos, Viprion

Check Point, Maestro, NGFW platforms and management tools as Tufin

Forescout, Cisco ISE

Network Access Control in enterprise environments

Infoblox, DNS, IPAM and DHCP

Public and Private cloud security

Workflow automation

It is desirable and advantageous to also have knowledge and experience of the following technology platforms:

Cisco Routing & Switching

Microsoft Active Directory, CyberArk

AWS, Azure

Illumio

Technical Certification

You will have the following certification or demonstrable working experience:

F5-CTS, F5-CSE, F5-CADE/A

Check Point CSSE, CCSM

Infoblox DDI

Cisco CCNP level Security, CCIE Security

ITILv3 foundation or higher

Cisco CCNP Routing and Switching