L2 Security Specialist

ITC Infotech; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

ITC Infotech in Pune is seeking an L2 Security Specialist to join the cybersecurity operations team supporting a critical Project. You will guard hybrid cloud workloads across Azure, AVS, and on-prem data centers, implementing zero-trust policies and incident response playbooks.

The role emphasizes identity governance, vulnerability management, and secure configurations using NSX-T, Azure Defender, and Key Vault, with a focus on Microsoft Entra ID and RBAC across Azure subscriptions and AVS

Qualifications

• 3+ years in Cyber Security, SecOps, or Cloud Security.
• Hands-on in Microsoft Azure with Defender for Cloud, NSGs, and IAM.
• VMware NSX-T firewall configurations and AVS security knowledge.

Responsibilities

• Secure workloads across Azure, AVS, and on-premises environments.
• Define and enforce granular micro-segmentation policies.
• Manage hybrid identities and RBAC across subscriptions and AVS resources.
• Lead incident response and apply CIS/NIST controls.

Skills

SecOps

Cloud security

Azure security

VMware NSX-T

KQL

Identity management

RBAC management

MFA enforcement

SIEM

Tools

Azure Defender for Cloud

Azure AD / Entra ID

NSX-T Firewall

Qualys

Job description

We are seeking an analytical and vigilant L2 Security Specialist to join the cybersecurity operations team supporting the Project. The infrastructure is a complex hybrid environment spanning native Microsoft Azure, Azure VMware Solution (AVS), and on-premises data centers.

In this role, you will be the core technical guardian of the project's security boundaries. You will secure workloads across public cloud, virtualized VMware software-defined data centers (SDDCs), and legacy physical hardware. Your mission is to implement zero-trust network configurations, manage hybrid identities, ensure strict vulnerability governance, and lead the technical response to security events across all environments.

Key Responsibilities

1. Hybrid Network Security & Micro-segmentation

• NSX-T & Cloud Firewalls: Manage and audit distributed firewall rules within VMware NSX-T for the Azure VMware Solution (AVS) cluster, as well as native Azure Network Security Groups (NSGs) and Application Security Groups (ASGs).
• Micro-segmentation Strategy: Define and implement granular micro-segmentation policies to isolate application workloads across native Azure, AVS guest environments, and on-premises physical servers.
• Cross-Boundary Encryption: Ensure all transit data moving over VPNs, ExpressRoute, and Azure Global Reach is securely encrypted using IPsec or TLS protocols.

2. Identity & Access Governance

• Hybrid Identity: Administer and monitor identity syncs and federations between Microsoft Entra ID (Azure AD) and on-premises Active Directory Domain Services (AD DS).
• Access Control (RBAC): Enforce the principle of least privilege by configuring and maintaining Role-Based Access Control (RBAC) across Azure subscriptions, AVS vCenter instances, and on-premises virtualization hosts.
• MFA & Conditional Access: Implement and audit Conditional Access Policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) for project personnel.

3. Vulnerability & Threat Management

• Vulnerability Scanning: Schedule and evaluate regular vulnerability scans across hybrid VM operating systems, containerized workloads, and hypervisor management interfaces using tools like Microsoft Defender for Cloud or Qualys.
• Patch Compliance Governance: Work closely with the DevOps and Infrastructure teams to track patch compliance and prioritize remediations for CVEs affecting virtual machines in Azure and AVS.
• Secrets Management: Securely manage certificates, connection strings, API keys, and cryptographic keys using Azure Key Vault and on-premises hardware security modules (HSMs).

4. Security Monitoring & Incident Response

• SIEM Management: Collect, analyze, and query security logs (using KQL) inside Azure Sentinel (SIEM/SOAR) and on-premises syslog servers to detect lateral movements or anomalies.
• Incident Containment: Act as the Tier-2 incident responder for security alerts, following playbook actions to isolate compromised virtual machines (e.g., placing VMs in isolated NSX-T segments).
• Compliance Auditing: Perform regular compliance audits against frameworks such as CIS Benchmarks, NIST, or ISO 27001 to ensure the hybrid infrastructure meets organizational policies.

Qualifications & Skills

Required:

• Experience: 3+ years of experience in Cyber Security, Security Operations (SecOps), or Cloud Security.
• Cloud Security Knowledge: Hands-on experience securing workloads in Microsoft Azure (utilizing Microsoft Defender for Cloud, Network Security Groups, and IAM).
• Virtualization Security: Solid understanding of VMware security concepts (vSphere hardening, vCenter access controls) and VMware NSX-T firewall configurations (essential for securing AVS workloads).
• Identity Management: Experience managing hybrid authentication models (Azure AD / Active Directory).
• Log Analysis: Proficiency in querying log data (such as using Kusto Query Language - KQL in Log Analytics or Azure Sentinel).

Preferred:

• Certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500), CompTIA Security+, or VMware Certified Professional - Security (VCP-SEC).
• Infrastructure as Code (IaC) Security: Familiarity with static code analysis tools (such as Checkov or tfsec) to scan Terraform templates for security flaws.