Job Description :

- Design, implement, and manage firewall policies, NAT, VPN, and segmentation rules.

- Deploy and manage proxy / secure web gateway solutions with filtering, SSL inspection, and access control.

- Configure and tune IDS/IPS solutions to detect and prevent security threats.

- Implement network segmentation and Zero Trust principles.

- Perform firewall and proxy rule audits and security hardening.

- Integrate network security tools with SIEM (Sentinel, Splunk) and other security platforms.

- Provide L3 troubleshooting and incident response support.

- Ensure compliance with security standards like NIST, ISO 27001, CIS.

- Maintain documentation, SOPs, and architecture diagrams.

- Define, maintain, and evolve network security strategies, roadmaps, standards, and architectures aligned with business objectives.

- Establish, enforce, and continuously improve security policies, procedures, and domain-level processes.

- Define and maintain end-to-end infrastructure and security architecture aligned with business and IT strategy.

- Design scalable, secure, and high-performing environments across on-prem, cloud, and hybrid platforms.

- Establish and enforce standards, policies, and best practices for infrastructure and security domains.

- Drive technology strategy, roadmap planning, and solution selection across infrastructure and security toolsets.

Qualification & Experience :

- Relevant experience should be 7+ years.

- Firewalls : Palo Alto, Fortinet, Check Point, Cisco ASA/FTD.

- Proxy / Secure Web Gateway : Zscaler, Blue Coat, Netskope.

- IDS/IPS technologies.

- Networking : TCP/IP, BGP, OSPF, VLANs, VPNs, NAT.

- Security concepts : Zero Trust, segmentation, threat detection.

- SIEM integration : Microsoft Sentinel, Splunk.

- Strong incident handling expertise across containment, eradication, recovery, and lessons learned.

- Hands-on network security knowledge (firewalls, IDS/IPS, WAF, VPN, Proxies, NAC) and packet/log analysis.

- Experience integrating cloud and identity telemetry; familiarity with Azure/M365 security preferred.

- Knowledge of frameworks and models : MITRE ATT&CK, NIST 800-61 IR, NIST CSF, ISO 27001, NIS2.

- Excellent communication, stakeholder management, and executive reporting skills.

- Audit participation experience is a must.

Preferred Certifications :

- Security+ : CompTIA Security+.

- Cloud security (e.g., AZ500, SC200, CCSP).

- Network security (e.g., NSE, PCNSA/PCNSE, CCNP Security).

- CISSP/CISM.

- CIS/NIST/ISO 27001.