Manager IT

Kansai Nerolac; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Kansai Nerolac in Mumbai seeks an experienced Network Architecture & Security Leader to design, implement, and govern enterprise networks across data centers, cloud, and branch offices. You will drive secure, scalable LAN/WAN/WLAN, SD-WAN, and hybrid cloud solutions while leading security operations and incident response.

Responsibilities include managing NGFWs (Check Point, Fortinet, SonicWall), ZTNA, IAM controls, and security monitoring with SIEM/NDR.

Qualifications

• 8–12 years of experience in Enterprise Network Infrastructure, Security, and Cybersecurity Operations.
• Proven experience designing, implementing and managing large-scale enterprise networks.
• Hands-on experience in Firewall Management, SOC Operations, and Security Monitoring.
• Experience in BFSI, Manufacturing, IT Services, or large enterprise environments preferred.

Responsibilities

• Design, implement, and manage enterprise network architecture across Data Centers, Cloud, and Branch Office environments.
• Develop scalable, secure, and resilient LAN, WAN, WLAN, SD-WAN, and Hybrid Cloud networking solutions.
• Lead greenfield deployments, infrastructure upgrades, and network transformation initiatives.
• Create and maintain High-Level Design (HLD) and Low-Level Design (LLD) documentation.
• Establish network standards, architecture frameworks, and best practices.
• Design and implement enterprise security architecture aligned with business and regulatory requirements.
• Manage and maintain cybersecurity infrastructure, including Firewalls, IDS/IPS, VPN, NAC, SASE, Zscaler, and DDoS protection solutions.
• Administer and optimize Next-Generation Firewalls (NGFW) including Check Point, Fortinet, and SonicWall.
• Implement Zero Trust Network Architecture (ZTNA) and Identity & Access Management (IAM) controls.
• Drive security improvement initiatives and strengthen overall cyber resilience.
• Establish proactive network monitoring, observability, logging, and alerting frameworks.
• Monitor network performance, availability, and security posture.
• Integrate and manage SIEM, NDR, SOC, and network monitoring platforms.
• Conduct network traffic analysis, capacity planning, and threat detection activities.
• Lead incident response, root cause analysis, and resolution of critical network/security issues.
• Design, configure, and manage enterprise routing and switching infrastructure.
• Implement and troubleshoot BGP, OSPF, EIGRP, MPLS, VXLAN, EVPN, and related technologies.
• Ensure network availability through redundancy, failover, and disaster recovery mechanisms.
• Implement network segmentation and micro-segmentation strategies.
• Ensure compliance with organizational security policies, regulatory requirements, and industry standards.
• Conduct risk assessments, vulnerability reviews, and implement mitigation measures.
• Support internal and external audits, compliance reviews, and governance initiatives.
• Drive cybersecurity awareness and adherence to security controls.
• Lead continuous improvement initiatives across network and security operations.
• Collaborate with cross-functional teams, vendors, and stakeholders for successful project delivery.
• Define operational KPIs, SLAs, and governance mechanisms.
• Mentor and guide technical teams on network and security best practices.

Skills

Network Architecture

Security Architecture

Firewall Management

SOC Operations

SIEM & NDR

Zero Trust (ZTNA)

IAM Controls

BGP & OSPF

MPLS & EVPN

SD-WAN & Hybrid Cloud

Regulatory Compliance

Leadership & Mentoring

Tools

Check Point

Fortinet

SonicWall

Zscaler

Job description

Role & responsibilities

Network Architecture & Infrastructure

• Design, implement, and manage enterprise network architecture across Data Centers, Cloud, and Branch Office environments.
• Develop scalable, secure, and resilient LAN, WAN, WLAN, SD-WAN, and Hybrid Cloud networking solutions.
• Lead greenfield deployments, infrastructure upgrades, and network transformation initiatives.
• Create and maintain High-Level Design (HLD) and Low-Level Design (LLD) documentation.
• Establish network standards, architecture frameworks, and best practices.

Network Security & Cybersecurity

• Design and implement enterprise security architecture aligned with business and regulatory requirements.
• Manage and maintain cybersecurity infrastructure, including Firewalls, IDS/IPS, VPN, NAC, SASE, Zscaler, and DDoS protection solutions.
• Administer and optimize Next-Generation Firewalls (NGFW) including Check Point, Fortinet, and SonicWall.
• Implement Zero Trust Network Architecture (ZTNA) and Identity & Access Management (IAM) controls.
• Drive security improvement initiatives and strengthen overall cyber resilience.

Network Operations & Monitoring

• Establish proactive network monitoring, observability, logging, and alerting frameworks.
• Monitor network performance, availability, and security posture.
• Integrate and manage SIEM, NDR, SOC, and network monitoring platforms.
• Conduct network traffic analysis, capacity planning, and threat detection activities.
• Lead incident response, root cause analysis, and resolution of critical network/security issues.

Routing, Switching & Infrastructure Management

• Design, configure, and manage enterprise routing and switching infrastructure.
• Implement and troubleshoot BGP, OSPF, EIGRP, MPLS, VXLAN, EVPN, and related technologies.
• Ensure network availability through redundancy, failover, and disaster recovery mechanisms.
• Implement network segmentation and micro-segmentation strategies.

Risk, Compliance & Governance

• Ensure compliance with organizational security policies, regulatory requirements, and industry standards.
• Conduct risk assessments, vulnerability reviews, and implement mitigation measures.
• Support internal and external audits, compliance reviews, and governance initiatives.
• Drive cybersecurity awareness and adherence to security controls.

Process Improvement & Leadership

• Lead continuous improvement initiatives across network and security operations.
• Collaborate with cross-functional teams, vendors, and stakeholders for successful project delivery.
• Define operational KPIs, SLAs, and governance mechanisms.
• Mentor and guide technical teams on network and security best practices.

Preferred candidate profile

• 08-12 years of experience in Enterprise Network Infrastructure, Network Security, and Cybersecurity Operations.
• Proven experience in designing, implementing, and managing large-scale enterprise network environments.
• Hands-on experience in Network Security Architecture, Firewall Management, SOC Operations, and Security Monitoring.
• Prior experience in BFSI, Manufacturing, IT Services, or large enterprise environments would be preferred.