Network Security Engineer

Kornferry; Bengaluru; On-site; INR 350,000 - 700,000; Full time

Job summary

Kornferry is seeking a senior network security escalation expert to act as the technical authority for Cisco ACI, routing, switching, WAN/DCI, firewall, and F5 incidents. You will lead RCA, drive preventive actions, and mentor L1/L2 engineers while ensuring changes meet governance and DR readiness.

The role requires 8–12 years of experience, with at least 5 years in enterprise network security, and is based in India with 9x5 Singapore business hours and on-call support.

Qualifications

• 8-12 years, with at least 5 years in enterprise network security engineering.
• Bachelor degree in networking, IT, engineering, or equivalent.
• CCNP/CCIE, PCNSE, Fortinet professional, Check Point, or F5 advanced certification preferred.
• ITIL 4 Foundation; problem management experience preferred.

Responsibilities

• Lead diagnosis and restoration for severe network, ACI, routing, switching, inter-site connectivity, firewall, and load-balancer incidents.
• Perform RCA, identify preventive actions, review recurring faults, and mentor L1/L2 engineers.
• Provide technical assurance for major changes, firewall governance, firmware maintenance, failover, DR readiness, configuration risk, and performance or capacity concerns.
• Coordinate senior escalations with Cisco, F5, Palo Alto, Fortinet, Check Point, carriers, and other vendors.
• Maintain engineering runbooks, known-error content, technical standards compliance evidence, and improvement recommendations.
• Work only on approved, in-scope infrastructure and follow the Bank-approved ITSM (Service Now), change, access, security, and evidence-retention processes.
• Maintain accurate incident, request, change, problem, knowledge, and operational records in the approved tools and repositories.

Skills

Cisco ACI

Routing & Switching

WAN/DCI

Firewall & F5

Security Governance

RCA & DR

Change-Risk Assessment

Executive Communication

Education

Bachelor's degree in networking/IT/engineering

CCNP/CCIE

PCNSE

Fortinet/Check Point/F5 certs

ITIL 4 Foundation

Tools

ServiceNow

Job description

Role Purpose

Act as senior escalation and technical authority for complex Cisco ACI, routing, switching, DCI/WAN, firewall, F5, and foundational network-service incidents and changes. Lead RCA, technical risk review, performance optimization, DR support, and OEM escalation within the approved architecture.

Required Skills

• Expert Cisco ACI, routing, switching, WAN/DCI, high availability, and troubleshooting
• Advanced firewall and F5 engineering across relevant vendors
• Network security governance, packet analysis, performance, capacity, RCA, and DR
• Strong change-risk assessment and executive incident communication

Key Accountabilities

• Lead diagnosis and restoration for severe network, ACI, routing, switching, inter-site connectivity, firewall, and load-balancer incidents.
• Perform RCA, identify preventive actions, review recurring faults, and mentor L1/L2 engineers.
• Provide technical assurance for major changes, firewall governance, firmware maintenance, failover, DR readiness, configuration risk, and performance or capacity concerns.
• Coordinate senior escalations with Cisco, F5, Palo Alto, Fortinet, Check Point, carriers, and other vendors.
• Maintain engineering runbooks, known-error content, technical standards compliance evidence, and improvement recommendations.
• Work only on approved, in-scope infrastructure and follow the Bank-approved ITSM (Service Now), change, access, security, and evidence-retention processes.
• Maintain accurate incident, request, change, problem, knowledge, and operational records in the approved tools and repositories.

Qualifications and Experience

• 8-12 years, with at least 5 years in enterprise network security engineering
• Bachelor degree in networking, IT, engineering, or equivalent
• CCNP/CCIE, PCNSE, Fortinet professional, Check Point, or F5 advanced certification preferred
• ITIL 4 Foundation; problem management experience preferred

Working Arrangements

• The role is based in India and will operate under 9x5 Singapore business hours with on-call support.
• The role shall participate in the applicable support roster and provide after-hours support for critical incidents in accordance with the approved severity and activation process.
• Participation in planned maintenance, major incident support, disaster recovery exercises and approved out-of-hours changes may be required.
• Successful completion of background screening, identity and employment verification, confidentiality obligations, security training and client onboarding is required before access is granted.
• Production access shall use approved privileged-access and multi-factor authentication controls and remain subject to least privilege, segregation of duties, monitoring and periodic review.
• All activities shall follow approved runbooks, service scope, ITSM processes, change control, maintenance windows, evidence-retention requirements and client approvals.
• Coordinate with other resolver teams, client stakeholders, application teams, facilities teams, and OEM vendors without assuming responsibilities outside the contracted scope.