NETWORK SECURITY ENGINEER
Summary
Network Security Engineer in Bengaluru on the IT Services team, protecting the company's network infrastructure day to day: managing external DNS and SSL certificates, firewalls, proxies and Trend Micro tooling, F5 load balancers (LTM/GTM/ASM), micro-segmentation, CDN/DDoS mitigation, patching, incident troubleshooting, and disaster recovery.
Summary
Responsibilities
- Manage and configure external DNS systems and oversee the lifecycle of SSL certificate management.
- Implement and maintain micro-segmentation strategies to isolate network traffic and reduce the attack surface.
- Develop, document, and maintain comprehensive runbooks and Standard Operating Procedures (SOPs) for security operations.
- Execute software upgrades and patching schedules to ensure systems remain secure and up-to-date.
- Lead incident troubleshooting efforts to identify, analyze, and resolve security breaches or network anomalies promptly.
- Design and deploy strategies for Content Delivery Network (CDN) integration and DDoS mitigation to protect against volumetric attacks.
- Formulate and test disaster recovery plans to ensure business resilience during critical system failures.
- Provide technical leadership and support during major go-live events to ensure seamless transitions.
- Administer network security management applications to monitor and control access to protected resources.
- Develop and execute automation regression testing protocols to validate security controls without disrupting operations.
- Configure and manage F5 load balancing solutions, including Local Traffic Manager (LTM), Global Traffic Manager (GTM), and Advanced Security Manager (ASM).
- Oversee proxy configurations and integrate Trend Micro security solutions to enhance endpoint and network defense.
- Monitor and maintain firewall policies to enforce strict access controls and prevent unauthorized entry.
Requirements
- Minimum of 5 to 8 years of hands-on experience in network security within the IT Services sector.
- Proven expertise in External DNS administration and SSL certificate lifecycle management.
- Strong background in implementing micro-segmentation and network security management applications.
- Demonstrated ability to create detailed runbooks, SOPs, and manage change control processes.
- Proficiency in performing software upgrades, patching, and automation regression testing.
- Extensive experience in incident troubleshooting, disaster recovery planning, and go-live support.
- In-depth knowledge of CDN architectures and DDoS mitigation techniques.
- Certified or proven experience with F5 technologies, specifically LTM, GTM, and ASM.
- Familiarity with Trend Micro security solutions and firewall management.
- Solid understanding of proxy configurations and their role in network security.
- Ability to work effectively in a fast-paced environment while maintaining high standards of security compliance.