Job Summary
We are looking for an Enterprise Network Security Engineer to support 24/7 Managed Services operations. The role focuses on continuous monitoring, management, and protection of enterprise network security infrastructure, ensuring high availability, strong security posture, and strict SLA adherence. The engineer will handle incidents, changes, and proactive security operations across multiple customer environments.
Key Responsibilities
- Provide 24/7 monitoring and support for enterprise network security infrastructure
- Manage and troubleshoot Next-Generation Firewalls (NGFW)
- Handle L2/L3 incidents related to:
- Firewall policy issues
- VPN (IPSec, SSL, Site-to-Site, Remote Access)
- IPS/IDS alerts
- Network segmentation and access issues
- Perform real-time alert analysis, triage, and escalation as per SOP
- Implement and review firewall rules, NAT, security policies, and routing changes
- Monitor and maintain High Availability (HA) and failover configurations
- Investigate and respond to security incidents such as:
- Intrusion attempts
- DDoS attacks
- Suspicious traffic patterns
- Policy violations
- Perform network security health checks and posture assessments
- Ensure logs are forwarded and integrated with SIEM systems
- Participate in vulnerability remediation and security hardening activities
- Maintain accurate ticket updates and documentation in ITSM tools
- Prepare shift handover notes and operational reports
- Coordinate with OEM TAC teams and internal engineering teams
- Support onboarding of new enterprise customers into managed services
- Ensure compliance with SLAs, KPIs, and customer security requirements
Technical Skills Required
- Strong experience with:
- Enterprise Firewalls
- Firewall policy management and optimization
- IPS/IDS, Web Filtering, Application Control
- Solid understanding of:
- Routing and Switching (BGP, OSPF, VLANs, Subnets)
- VPN technologies (IPSec, SSL VPN)
- Network segmentation and Zero Trust concepts
- Experience with:
- Secure SD-WAN
- Cloud network security (Azure/AWS - basic to intermediate)
- SIEM log analysis and integration
- Packet analysis tools (Wireshark, TCPdump)
- Knowledge of:
- DNS security, DDoS protection
- WAF and proxy concepts
- Compliance standards (ISO 27001, PCI-DSS, SOC2)
- Familiarity with:
- Ticketing tools (ServiceNow, Freshservice, Jira, etc.)
- Network monitoring systems (NMS, SNMP, NetFlow)
Behavioral & Operational Skills
- Willingness to work in 24/7 rotational shifts
- Strong troubleshooting and root-cause analysis skills
- Ability to work under pressure in incident situations
- Clear communication and strong documentation discipline
- Ownership-driven and customer-focused approach
- Strong collaboration with shift teams and escalation teams
- Strict adherence to SOPs and security processes
Certifications (Preferred)
- CCNA Security / CCNP Security
- CEH, Security+
- ITIL Foundation
KPIs for the Role
- SLA and response-time compliance
- Incident resolution quality and closure rate
- Change success rate (zero-impact changes)
- Security incident containment effectiveness
- Shift handover accuracy
- Customer satisfaction score
- Proactive risk identification and prevention