Senior Network & Cloud Security Operations Engineer
Location: Mumbai (Hybrid model).
We are looking for a highly technical Senior Security Engineer to join our Global Security Operations team. He/she will be the primary lead for managing a complex, multi-vendor firewall estate (Cisco, Fortinet, Check Point) across on-premises and cloud environments. This is a high-impact role requiring a mix of rapid incident response (P1/P2) and implementing BAU project changes including Low-Level Design (LLD).
Resource shall be working in a 24x7 support model having rotational shift.
Key Responsibilities
Incident and Problem Management
- End-to-End Troubleshooting: Responsible for P1, P2, and P3 incident ticket resolution, ensuring rapid restoration of services while maintaining security integrity.
- Root Cause Analysis (RCA): Lead the post-incident process by conducting deep-dive RCAs.
Firewall Operations & Change Management
- Multi-Vendor Management: Perform complex configuration, rule optimization, and policy management for Cisco (ASA/FTD), Fortinet (FortiGate), and Check Point firewalls.
- Hybrid Environment Support: Manage firewalls deployed in both traditional data centers and cloud environments (AWS/Azure/GCP).
- Change Execution: Implement all tiers of security changes, ensuring zero downtime and strict adherence to maintenance windows.
Documentation
- LLD & Documentation: Create and update Low-Level Design (LLD) documents for network security integrations.
- Runbook Creation: Develop and maintain detailed Runbooks and Standard Operating Procedures (SOPs) for the NOC/SOC teams to ensure consistent operational delivery.
- Quality Assurance: Execute Two-Eye Checks (Peer Reviews) for complex change windows to ensure accuracy and prevent human error in the production environment.
- Understanding of ITIL framework (Incident, Change, and Problem Management).
Experience
- 7+ years in Network Security, with a focus on large-scale production support and BAU project activities.
- Certifications: CCSA, CCSE.
- Minimum 5 years hands-on experience on checkpoint product, capable to independently handle P1, P2 tickets and complex change activities.
Education
- Graduate in IT/ Telecom domain.
Expertise In Security Platforms
- Fortinet: FortiManager, FortiAnalyzer, and FortiGate clusters.
- Checkpoint, Cisco FTD: Extensive experience with these platforms.
Cloud Networking
- Solid understanding of Cloud Security Groups, user-defined routes (UDR), and cloud-native firewall integrations.