Network Security Engineer

Role Purpose

Act as senior escalation and technical authority for complex Cisco ACI, routing, switching, DCI/WAN, firewall, F5, and foundational network-service incidents and changes. Lead RCA, technical risk review, performance optimization, DR support, and OEM escalation within the approved architecture.

Required Skills

• Expert Cisco ACI, routing, switching, WAN/DCI, high availability, and troubleshooting
• Advanced firewall and F5 engineering across relevant vendors
• Network security governance, packet analysis, performance, capacity, RCA, and DR
• Strong change-risk assessment and executive incident communication

Key Accountabilities

• Lead diagnosis and restoration for severe network, ACI, routing, switching, inter-site connectivity, firewall, and load-balancer incidents.
• Perform RCA, identify preventive actions, review recurring faults, and mentor L1/L2 engineers.
• Provide technical assurance for major changes, firewall governance, firmware maintenance, failover, DR readiness, configuration risk, and performance or capacity concerns.
• Coordinate senior escalations with Cisco, F5, Palo Alto, Fortinet, Check Point, carriers, and other vendors.
• Maintain engineering runbooks, known-error content, technical standards compliance evidence, and improvement recommendations.
• Work only on approved, in-scope infrastructure and follow the Bank-approved ITSM (Service Now), change, access, security, and evidence-retention processes.
• Maintain accurate incident, request, change, problem, knowledge, and operational records in the approved tools and repositories.

Qualifications and Experience

• 8-12 years, with at least 5 years in enterprise network security engineering
• Bachelor degree in networking, IT, engineering, or equivalent
• CCNP/CCIE, PCNSE, Fortinet professional, Check Point, or F5 advanced certification preferred
• ITIL 4 Foundation; problem management experience preferred

Working Arrangements

• The role is based in India and will operate under 9x5 Singapore business hours with on-call support.
• The role shall participate in the applicable support roster and provide after-hours support for critical incidents in accordance with the approved severity and activation process.
• Participation in planned maintenance, major incident support, disaster recovery exercises and approved out-of-hours changes may be required.
• Successful completion of background screening, identity and employment verification, confidentiality obligations, security training and client onboarding is required before access is granted.
• Production access shall use approved privileged-access and multi-factor authentication controls and remain subject to least privilege, segregation of duties, monitoring and periodic review.
• All activities shall follow approved runbooks, service scope, ITSM processes, change control, maintenance windows, evidence-retention requirements and client approvals.
• Coordinate with other resolver teams, client stakeholders, application teams, facilities teams, and OEM vendors without assuming responsibilities outside the contracted scope.