Network Security Engineer

Kerala Vision Broadband Limited; Kerala; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Kerala Vision Broadband Limited seeks a Security Architect to design end-to-end security across network, EUC, and data centre domains for both ISP and MSI customers. A strong commercial mindset and pre-sales capability are essential to position security as a value driver.

You will lead architecture for SASE/SSE, SIEM frameworks, and OEM relationships with major vendors, while guiding security assessments and compliance mappings across ISO 27001, NIST, PCI-DSS, and GDPR.

Qualifications

• Bachelor's degree or equivalent in engineering or IT with a security focus.

Responsibilities

• Architect holistic security solutions covering perimeter, internal segmentation, endpoint, cloud, and identity layers
• Design network security solutions: NGFW, IPS/IDS, SD-WAN security overlays, DDoS protection, and carrier-grade NAT/CGN security
• Architect End User Computing security — endpoint protection platforms (EPP), EDR/XDR, VDI security, email security, and web proxy/filtering
• Design Data Centre security: micro-segmentation, East-West firewall controls, WAF, PAM, and Zero Trust Architecture (ZTA)
• Position and architect SASE (Secure Access Service Edge) and SSE solutions - Zscaler, Prisma Access, Cato Networks
• Develop SOC design frameworks, SIEM architecture (Splunk, Microsoft Sentinel, IBM QRadar), and SOAR playbooks
• Lead security assessments, gap analyses, and compliance mapping (ISO 27001, NIST, PCI-DSS, GDPR, NCA ECC in KSA/UAE)
• Respond to security-focused RFPs, build BoMs, and lead technical presentations to CISO-level stakeholders
• Maintain strong OEM relationships with Palo Alto Networks, Fortinet, Check Point, Cisco, CrowdStrike, Microsoft, Zscaler, and Milestone PSIM/VMS
• Provide guidance on ICCC (Integrated Command & Control Centre) security integration — PSIM, video surveillance, access control
• Palo Alto Networks: PAN-OS, Panorama, Prisma Access, Prisma Cloud - hands-on deployment and policy management
• Fortinet: FortiGate, FortiManager, FortiAnalyzer, FortiClient EMS - advanced routing security and SD-WAN integration
• Check Point: Smart Console, CPUSE, CloudGuard - policy administration and HA deployment
• Microsoft 365 Defender stack: Defender for Endpoint, Identity, Cloud Apps, and Sentinel SIEM
• Network segmentation: VLANs, ACLs, micro-segmentation with VMware NSX-T or Illumio
• Identity and access management: Active Directory, Azure AD, Okta, CyberArk PAM
• Vulnerability management tools: Tenable Nessus, Qualys, Rapid7 - enterprise scanning and reporting
• ICCC / Physical Security integration: Milestone XProtect, Genetec, Lenel, Honeywell Pro-Watch - understanding of video analytics and access control
• Cloud security posture management (CSPM) on AWS, Azure, and GCP

Skills

Security architecture

Pre-sales

Threat modeling

Zero Trust

SIEM design

SOC frameworks

Education

B.E./B.Tech (EC/CS/IT/Telecom)

BCA / MCA / M.Sc. (IT/Networks)

M.Tech / MBA in Technology Management

Tools

Palo Alto PAN-OS

Prisma Access

FortiGate

Check Point

Zscaler

Splunk/SIEM

VMware NSX-T

Job description

Company Description

Kerala Vision Broadband Limited (KVBL) is a leading Internet Service Provider in India, promoted by the Cable Operator's Association, a consortium of around 5000 cable operators in Kerala. The company focuses on delivering high-speed internet and internet-enabled services to households and institutions at affordable rates using state-of-the-art technology. KVBL operates the largest FTTH network in South India, offering extensive digital and broadband services. Its network reaches both urban and rural areas, supported by a strong grassroots presence of dedicated cable operators. Kerala Vision is recognized as one of the most efficient and reliable multi-service providers in the country.

Role Description

The Security Architect is a cross-domain cybersecurity authority responsible for designing and positioning end-to-end security architectures spanning Network Security, End User Computing (EUC) Security, and Data Centre Security. The role serves both ISP clients (managing telco-grade security infrastructure) and MSI customers (enterprise security transformation). A strong commercial mindset and pre-sales ability are essential to position security as a value driver rather than a cost centre.

Key Responsibilities

• Architect holistic security solutions covering perimeter, internal segmentation, endpoint, cloud, and identity layers
• Design network security solutions: NGFW, IPS/IDS, SD-WAN security overlays, DDoS protection, and carrier-grade NAT/CGN security
• Architect End User Computing security — endpoint protection platforms (EPP), EDR/XDR, VDI security, email security, and web proxy/filtering
• Design Data Centre security: micro-segmentation, East-West firewall controls, WAF, privileged access management (PAM), and Zero Trust Architecture (ZTA)
• Position and architect SASE (Secure Access Service Edge) and SSE solutions - Zscaler, Prisma Access, Cato Networks
• Develop SOC design frameworks, SIEM architecture (Splunk, Microsoft Sentinel, IBM QRadar), and SOAR playbooks
• Lead security assessments, gap analyses, and compliance mapping (ISO 27001, NIST, PCI-DSS, GDPR, NCA ECC in KSA/UAE)
• Respond to security-focused RFPs, build BoMs, and lead technical presentations to CISO-level stakeholders
• Maintain strong OEM relationships with Palo Alto Networks, Fortinet, Check Point, Cisco, CrowdStrike, Microsoft, Zscaler, and Milestone PSIM/VMS
• Provide guidance on ICCC (Integrated Command & Control Centre) security integration — PSIM, video surveillance, access control
• Palo Alto Networks: PAN-OS, Panorama, Prisma Access, Prisma Cloud - hands-on deployment and policy management
• Fortinet: FortiGate, FortiManager, FortiAnalyzer, FortiClient EMS - advanced routing security and SD-WAN integration
• Check Point: Smart Console, CPUSE, CloudGuard - policy administration and HA deployment
• Microsoft 365 Defender stack: Defender for Endpoint, Identity, Cloud Apps, and Sentinel SIEM
• Network segmentation: VLANs, ACLs, micro-segmentation with VMware NSX-T or Illumio
• Identity and access management: Active Directory, Azure AD, Okta, CyberArk PAM
• Vulnerability management tools: Tenable Nessus, Qualys, Rapid7 - enterprise scanning and reporting
• ICCC / Physical Security integration: Milestone XProtect, Genetec, Lenel, Honeywell Pro-Watch - understanding of video analytics and access control
• Cloud security posture management (CSPM) on AWS, Azure, and GCP

Educational Qualifications

• Mandatory: B.E. / B.Tech in Electronics & Communication, Computer Science, Information Technology, or Telecommunications
• Equivalent: BCA / MCA / M.Sc. (IT/Networks) - considered with strong industry experience
• Preferred: Postgraduate qualifications (M.Tech / MBA in Technology Management) are a distinct advantage