Senior Network Engineer

Location: Bangalore

Working Model: Our flexible work arrangement combines both remote and in-office work, optimizing flexibility and productivity.

What youll do:

We are seeking a highly skilled Senior Network Cyber Security Specialist to join our team. This role is critical for securing and maintaining robust, scalable, and secure network infrastructures in complex, multi-cloud environments (primarily Azure and AWS), cloud-native security controls, and be able to handle end-to-end network security across distributed systems, hybrid environments, and multiple security domains. You will be a key player in securing the enterprise at every layer of the OSI model.

• Comprehensive Network Security Management:
  • Secure and optimize complex hybrid networks, integrating Software-Defined Networking (SDN) across on-premises, Azure, and AWS, while implementing micro-segmentation strategies using tools like NSX, Azure Virtual Network (VNet) Peering, and AWS Security Groups.
  • Implement next-gen firewalls and intrusion detection/prevention systems (IDS/IPS), such as Palo Alto Networks or Fortinet, and integrate with cloud-native tools like AWS Firewall Manager and Azure Sentinel.
  • Design end-to-end encrypted network connections with advanced key management techniques and certificate-based authentication to secure data in transit across public and private interfaces.

• Threat Detection and Incident Response:
  • Implement real-time threat detection and response systems using machine learning and advanced analytics .
  • Establish incident response frameworks to handle high-priority security events.

• Multi-Environment Security Integration:
  • Architect and secure highly available, multi-region, and multi-environment networks, utilizing Azure Global VNet Peering, AWS Global Accelerator, and cross-region replication to ensure data security and high-performance across geographies.
  • Ensure security compliance and policy enforcement across cloud, on-premises, and edge environments through centralized security management tools such as Azure Policy, AWS Config, and Terraform Sentinel.

• Cloud Network Security: (Optional)
  • Architect secure and scalable multi-cloud networks leveraging Azure Virtual WAN, AWS Transit Gateway, VPC Peering, and Azure Network Security Groups (NSGs) to create robust, segmented, and isolated environments.
  • Implement Zero Trust Network Architecture (ZTNA) across cloud and hybrid networks, integrating advanced security controls such as Azure Private Link, AWS PrivateLink, and Application Gateway WAF.
  • Design and enforce cloud-native security strategies in Azure and AWS using services like AWS Shield, Azure DDoS Protection, and Azure Firewall.
  • Build secure network topologies with integrated VPN, Direct Connect, and ExpressRoute to ensure encrypted connectivity across on-premises and cloud resources.

What to Have for this position:

Must have Skills:-

• 5+ years of experience in advanced network security engineering, with specific focus on securing cloud environments (Azure, AWS) and complex hybrid/multi-cloud infrastructures.
• Expert-level proficiency in Terraform with hands-on experience deploying secure infrastructure in production environments.
• Deep understanding of cloud-native security tools and best practices, including AWS VPC, Security Groups, Azure Virtual Networks, Azure Firewalls, Route Tables, and IAM policies.
• Strong knowledge of network protocols (IPSec, BGP, GRE, HTTP/S, TLS/SSL, DNS) and secure communications across distributed environments.
• Experience with firewalls such as Palo Alto or Fortigate or any other proven firewall vendor.
• Experience with Network equipments such as Cisco ,Meraki , or any other proven networking vendor.
• Experience with Zero Trust Architecture, micro-segmentation, and secure access service implementations.

Good to have Skills:-

• Proven experience with container network security .
• Expertise in network forensics, penetration testing, and vulnerability management in cloud-based environments.
• Expertise in Firewalls, Security Policies and VPN.