Job Description :

We are seeking a Network Security Architect with a world-class foundation in Core Networking (Layer 2/3) and Secure Site-to-Site Connectivity who would be working on customer products/projects.

Key Responsibilities :

- Represent OT network architecture with security and compliance, Connectivity architecture design and decision making.

- Define reference architectures standards and design frameworks for different OT networks.

- Responsible for designing, implementing, and governing secure, resilient, and scalable OT network architectures across industrial/manufacturing environments.

- Develop HLD/LLD, network diagrams, IP addressing schemes, routing and firewall policies, and architecture standards.

- Analyze different products from OEMs and make the right decisions that fits with technical and commercial aspects.

- Lead Zero Trust adoption for OT environments (ZPA/ZIA, Cisco ZTA).

- Drive architecture for multi-site, multi-region deployments.

- Define resiliency, redundancy, and failover strategies.

- Lead architecture reviews with Product, Cybersecurity, and Compliance.

- Influence vendor selection, technology standards, and long-term roadmaps.

- Work with cybersecurity teams on IDS/IPS, network monitoring, NAC, vulnerability management, and secure remote access.

- Coordinate with enterprise IT Network teams for IT/OT convergence and secure remote access.

Skills Needed :

- Networking (L2/L3) : Switching, STP, VLANs, BGP, OSPF, VRF, routing protocols.

- Firewall & Security : Cisco ASA / FTD / FMC, DMZ, Context design, segmentation.

- Zero Trust : ZPA / ZIA / Cisco ZTA, MFA, privileged access.

- Cloud AWS (Mandatory) : VPC, EC2, Transit Gateway, Direct Connect, virtual firewall.

- Enterprise proxy solutions : Hands-on experience with (SOCKS5, Squid, HAProxy, NGINX, Zscaler, Blue Coat, or F5).

- Standards (Awareness) : IEC 62443, NIST CSF, ISO 27001, Purdue Model.

Qualifications :

- Experience : 10 - 12 years in network engineering.

- Education : BTech / BCA / MCA.

- Certifications (Preferred) : CCNP / CCIE, AWS Advanced Networking, CISSP.