Cloud Security Engineer

Navlakha Management Services; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Navlakha Management Services in Bengaluru seeks a skilled security and cloud networking professional to design, implement, and manage secure Azure networks and WAF-enabled defenses. You will tune IPSec VPNs and hybrid connectivity while enforcing OWASP Top 10 protections and policy compliance.

The role requires hands-on FortiGate NGFW experience, Zscaler ZIA/ZPA proficiency, and strong ITIL/ServiceNow process knowledge.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, MCA, Information Technology or related discipline.
• Strong hands-on knowledge of Azure networking and security, including VNets, NSGs, Azure WAF, Azure Front Door and Azure VPN Gateway.
• Experience with WAF technologies such as Azure WAF, Cloudflare WAF and Akamai WAF.
• Working knowledge of Zscaler ZIA/ZPA; familiarity with ZDX, ZCC, PAC files, CASB and DLP is desirable.
• Hands-on experience with FortiGate NGFW, including security policies, NAT, IPS, Application Control, IPSec VPN and SSL VPN.
• Understanding of OWASP Top 10, WAF rule tuning, traffic analysis, false-positive investigation and application-layer security.
• Practical knowledge of ServiceNow and ITIL incident, service request and change management processes.
• Strong troubleshooting, analytical, documentation and stakeholder communication skills.

Responsibilities

• Design and maintain secure Azure cloud network infrastructure using VNets, NSGs and network segmentation.
• Configure and troubleshoot IPSec Site-to-Site VPNs, Azure VPN Gateway and hybrid-cloud connectivity.
• Administer and tune WAF solutions across Azure WAF, Azure Front Door, Cloudflare and Akamai.
• Implement WAF rules to mitigate OWASP Top 10 vulnerabilities, web attacks and API security threats.
• Manage Layer 7 DDoS protection, bot mitigation, rate limiting, IP reputation and false-positive tuning.
• Administer Zscaler ZIA/ZPA policies, ZTNA, URL filtering, SSL inspection, CASB and DLP.
• Manage Zscaler Client Connector, PAC files, App Connectors and traffic-forwarding profiles.
• Configure and maintain FortiGate firewalls, security policies, NAT, IPS, Application Control and VPNs.
• Perform firewall upgrades, security policy reviews, maintenance and troubleshooting.
• Manage incidents, service requests and change records through ServiceNow, following ITIL processes.
• Prepare RFCs, support CAB reviews and maintain security SOPs, configuration records and technical documentation.
• Collaborate with IT and infrastructure teams to resolve security issues and strengthen overall security posture.

Skills

Azure networking and security

WAF technologies

Zscaler ZIA/ZPA

FortiGate NGFW

OWASP Top 10

ServiceNow ITIL

Stakeholder communication

Troubleshooting

Documentation

Analytical thinking

Education

Bachelor’s/Master’s in CS/IT/related

Tools

Azure WAF

Azure VPN Gateway

Cloudflare WAF

Akamai WAF

ZDX

ZCC

FortiGate NGFW

Job description

Role & responsibilities

• Design and maintain secure Azure cloud network infrastructure using VNets, NSGs and network segmentation.
• Configure and troubleshoot IPSec Site-to-Site VPNs, Azure VPN Gateway and hybrid-cloud connectivity.
• Administer and tune WAF solutions across Azure WAF, Azure Front Door, Cloudflare and Akamai.
• Implement WAF rules to mitigate OWASP Top 10 vulnerabilities, web attacks and API security threats.
• Manage Layer 7 DDoS protection, bot mitigation, rate limiting, IP reputation and false-positive tuning.
• Administer Zscaler ZIA/ZPA policies, ZTNA, URL filtering, SSL inspection, CASB and DLP.
• Manage Zscaler Client Connector, PAC files, App Connectors and traffic-forwarding profiles.
• Configure and maintain FortiGate firewalls, security policies, NAT, IPS, Application Control and VPNs.
• Perform firewall upgrades, security policy reviews, maintenance and troubleshooting.
• Manage incidents, service requests and change records through ServiceNow, following ITIL processes.
• Prepare RFCs, support CAB reviews and maintain security SOPs, configuration records and technical documentation.
• Collaborate with IT and infrastructure teams to resolve security issues and strengthen overall security posture.

Preferred candidate profile

• Bachelors or Master’s degree in Computer Science, MCA, Information Technology or a related discipline.
• Strong hands-on knowledge of Azure networking and security, including VNets, NSGs, Azure WAF, Azure Front Door and Azure VPN Gateway.
• Experience with WAF technologies such as Azure WAF, Cloudflare WAF and Akamai WAF.
• Working knowledge of Zscaler ZIA/ZPA; familiarity with ZDX, ZCC, PAC files, CASB and DLP is desirable.
• Hands-on experience with FortiGate NGFW, including security policies, NAT, IPS, Application Control, IPSec VPN and SSL VPN.
• Understanding of OWASP Top 10, WAF rule tuning, traffic analysis, false-positive investigation and application-layer security.
• Practical knowledge of ServiceNow and ITIL incident, service request and change management processes.
• Strong troubleshooting, analytical, documentation and stakeholder communication skills.