Manager - Cyber Architecture - OT and Engineering Infrastructure

EY; Dadri; On-site; INR 2,800,000 - 4,800,000; Full time

Job summary

EY is seeking an Infrastructure Security Manager to lead security architecture for On-Prem and Cloud networks. You will design, deploy and optimize security controls across firewall, WAF, VPN and NAC, ensuring Zero Trust alignment and risk-based decisions.

The role requires hands-on technical expertise, strong communication with executives, and the ability to work in a fast-growth environment with travel as needed.

Qualifications

• 8–11 years of IT security experience with multiple specialization areas.
• Hands-on expertise in network security devices and architecture design.
• Strong knowledge of Zero Trust, cloud security, and on-prem networks.
• Excellent communication and stakeholder engagement skills.
• Willingness to travel and adapt to a fast-growth environment.

Responsibilities

• Design, build, test and implement network security systems in On-Prem & Cloud.
• Architect and deploy firewall, WAF, NAC, proxy, VPN, DDoS protection.
• Lead security design reviews and client security discussions.
• Develop security artefacts, roadmaps and training content.
• Stay up-to-date with security standards, protocols and best practices.

Skills

Security Design

Network security

Firewall & WAF

NAC & Proxy

Zero Trust

Cloud & On-Prem

VPN & IPS

DDoS Protection

Networking protocols

Security Architecture

Tools

Palo Alto

Cisco Firewalls

WAF

SDWAN

Zscaler

EDR/XDR

Job description

Service line - Position Title: EY- Cyber Security Technology Consulting Infrastructure Security Manager

The Opportunity Were looking for an Infrastructure Security professional with solution mindset and hands on security engineering expertise in network security concepts, risk and controls concepts, architecture design of Firewall, WAF (web application firewall, NAC (Network Access Control), Proxy. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the rollout of next generation market relevant solutions.

Your Key Responsibilities

• A Security-Design & Architect professional who is responsible for designing, building, testing and implementing network security systems within an organisations IT network- On Prem & Cloud.
• Professional is expected to have a thorough understanding of complex IT systems and stay up to date with the latest security standards, systems and authentication protocols, as well as best practice security products.
• Identify requirements, design document and implement technical solutions for scalable and resilient network architecture.
• Experience in building the networks by taking into consideration various factors like, bandwidth requirements, infrastructure requirements and security.
• Individual should possess experience in planning, design, deployment, configuration, integration and management of network protection controls including Next gen firewalls- Palo Alto, Cisco Firewalls, SDN Security, DDoS Protection, IPS, VPN, Wireless security, NAC and network authentication solutions to protect IT assets and should be responsible for deployment of any changes, plug‑ins, or configuration as requested by client.
• Plan, design, deploy, configure, integrate, and manage WAF, proxy/Zscaler solutions.
• Experience in building Zero Trust security architecture, strategy and solution design.
• Possess hands on experience in segmenting networks, applications, and data to limit exposure to attacks.
• Plan, design, deploy, configure, integrate and manage platform protection controls including virtualisation protection solutions on Hypervisors and thin clients security solutions.
• Good understanding of security concepts and technologies including, but not limited to TCP/IP, LDAP, DHCP, DNS, web filtering etc.
• Should be well-versed with network documentation that includes network drawings, text descriptions and equipment configurations, designing HLDs and LLDs.

Skills and attributes for success

• Serve as highly technical security expert to bring security transformation to both new and legacy infrastructure.
• Deep technical understanding of architecture and solutioning of infrastructure security components.
• Deep knowledge of services and service delivery approach and methodology for infrastructure security including governance and operating models.
• Proven track record in building and maintaining trusted relationships with key internal and external stakeholders.
• Willingness to travel and flex work timings as and when required.
• Ability to change and adapt in a hyper-growth environment.
• Self-starter and strategic thinker.
• Drive C-suite/senior leadership level meetings and discussion.
• Excellent oral and written communication skills and executive presence that enable effective engagement with senior stakeholders.
• Ability to work independently and communicate the technical and security related issues to client/business stakeholders.
• Clearly demonstrates proven extensive abilities with leveraging creative thinking and problem-solving skills, individual initiative, and utilizing Office 365, MS Office (Word, Excel, Access, PowerPoint) and Google Docs.
• Communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information and communicating potential conflicts.
• Must communicate consistently and drive objectives, relying on fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.
• Good presentation, project management, facilitation and delivery skills as well as strong analytical and problem-solving capabilities.
• Ability to create domain specific training content and deliver training effectively.
• Develop/Implement automation solutions and capabilities that are clearly aligned to client business, technology and threat posture.
• Demonstrates ability to track developments and changes in the digital business and threat environments to ensure that they're adequately addressed in clients security strategy plans and architecture artefacts.
• 8-11 years of experience in Information Technology experience, with specialization in Cyber Security roles that include multiple areas of specialization. Professional-level knowledge in areas from the following:
• Security Engineering & Architecture assessments
• Strong hands‑on exp. in firewalls, VPNs, NAC, SDWAN, WAF, Proxy, EDR/XDR etc.
• Expert level experience with deployment, maintenance and operations of one or more major network security Devices
• Zero Trust Security Strategy and Implementation
• Cloud Security Architecture
• Entrepreneurial approach to solving security problems with consultative skills
• Good soft skills i.e. verbal & written communication, technical document writing etc