Network Security Engineer

Lancesoft; Mumbai; On-site; INR 900,000 - 1,700,000; Full time

Job summary

Lancesoft is seeking a Network, Security & Infrastructure Expert to oversee regional enterprise infrastructure. You will secure and optimize hybrid networks across corporate and manufacturing sites, ensuring high availability and robust security controls.

You will implement and manage firewalls, EDR/IDS/IPS, SIEM, and VPNs, while coordinating with vendors and global stakeholders. Strong architecture and OT/IT separation expertise are essential.

Qualifications

• 8–12 years of enterprise network, security and infrastructure experience.
• Bachelor’s degree in CS/IT/EC or related field required.
• Strong hands-on architecture experience and vendor management.

Responsibilities

• Architect, configure, and maintain enterprise LAN/WAN, SD-WAN, and VPNs across sites.
• Lead security perimeter defense, EDR/IDS/IPS and SIEM for real-time monitoring.
• Manage hybrid cloud connectivity and on‑prem servers; ensure high availability.
• Escalate complex outages and manage vendor relationships; report SLAs.

Skills

TCP/IP

BGP/OSPF

SD-WAN

Firewalls

Azure/AWS networking

Education

Bachelor's degree in CS/IT/EC or related

Tools

Cisco

Aruba

VMware/Hyper-V

Azure/AWS networking

Job description

Network, Security & Infrastructure Expert

Role Overview

We are seeking an experienced Network, Security & Infrastructure Expert with 8 to 12 years of hands-on technical and architectural experience to oversee, optimize, and secure regional enterprise infrastructure. The individual will be responsible for maintaining high availability across network environments, enforcing robust cybersecurity measures, managing hybrid infrastructure operations, and ensuring reliable connectivity across manufacturing and corporate sites.

Key Responsibilities

1. Network Architecture & Operations

• Architect, configure, and maintain enterprise LAN, WAN, SD-WAN, wireless networks, and VPN tunnels across corporate and manufacturing locations.
• Manage enterprise-grade routers, layer 2/3 switches, load balancers, and access points (Cisco, Aruba, or equivalent).
• Monitor network performance, traffic metrics, and latency to ensure 99.9%+ uptime for core systems and ERP operations.
• Lead network segmentation initiatives to isolate OT/Manufacturing plant networks from corporate IT environments.

2. Information Security & Compliance

• Oversee network security perimeter defense, including next-generation firewalls (Fortinet, Palo Alto, or Check Point).
• Implement and manage Endpoint Detection & Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), and SIEM tools for real-time threat monitoring.
• Conduct periodic vulnerability assessments, patch management drives, and security hardening across network devices and servers.
• Manage access controls, identity management (Active Directory / Entra ID), and VPN authentication protocols.

3. Cloud & Server Infrastructure

• Manage hybrid cloud connectivity (Azure / AWS ExpressRoute / DirectConnect) and integration with on-premises datacenters.
• Maintain server virtualization platforms (VMware / Hyper-V) and oversee Windows/Linux server administration.
• Design, test, and execute robust Backup, Archiving, and Disaster Recovery (DR) strategies.

4. Vendor Management & L3 Operations

• Serve as the senior escalation point (L3) for complex network, security, and infrastructure outages.
• Manage relationships with ISPs, telecom providers, hardware OEMs, and third‑party managed security service providers (MSSPs).
• Establish and report on Infrastructure SLAs, incident resolution times, and system health metrics.

Key Requirements & Qualifications

• Education: Bachelors Degree in Computer Science, Information Technology, Electronics & Communication, or a related field.
• Experience: 8 to 12 years of progressive enterprise experience in network engineering, cybersecurity administration, and IT infrastructure management.

Technical Capabilities

• Expert knowledge of TCP/IP, BGP, OSPF, MPLS, SD-WAN, IPsec VPN, and VLAN configurations.
• Deep experience with Next-Gen Firewalls (Fortinet / Palo Alto preferred) and ZTNA (Zero Trust Network Access) models.
• Proficient in Microsoft Azure / AWS networking (VNets, Security Groups, ExpressRoute).
• Strong understanding of manufacturing/plant IT operations and OT network security best practices.

Industry Certifications (Highly Preferred)

• Network: CCNP / CCIE (Routing & Switching / Security)
• Security: CISSP, CISM, CEH, or Fortinet NSE (Level 4+)
• Cloud/Infra: Microsoft Certified: Azure Administrator / Azure Security Engineer, or AWS Certified Solutions Architect

Preferred Soft Skills

• Strong problem-solving, analytical, and troubleshooting skills under pressure.
• Excellent verbal and written communication skills to interact with global stakeholders and executive leadership.
• Ability to work independently in a fast‑paced, multi‑country corporate environment.