Network Security Lead

Estuate Software; Hyderabad; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

Estuate Software is seeking a Network Security Tech Lead to steer enterprise-grade security operations across on-prem & cloud environments. You will lead PAN firewall deployments, PKI, WAF, and email security while driving incident response and architecture initiatives.

The role requires deep expertise in Palo Alto technologies, cloud security, and zero trust considerations, with mentoring responsibilities for a team of engineers.

Qualifications

• 10+ years of experience in Network Security operations and leadership in large enterprises.
• Proven expertise with Palo Alto Networks firewalls, Prisma Access, GlobalProtect.
• Experience with WAF, PKI management, and cloud platforms (Azure, AWS, GCP).
• Strong knowledge of VPNs, RADIUS/TACACS+, and cloud networking architectures.

Responsibilities

• Provide technical leadership to Network Security Engineers and Administrators.
• Lead deployment and operation of PAN firewalls, Prisma Access, GlobalProtect and related services.
• Oversee PKI, WAF (Imperva), and Email security configurations with SP, DNS alignment.
• Participate in incident response, root cause analysis, and security architecture initiatives.
• Develop runbooks, SOPs, and documentation for audit readiness and compliance.
• Drive automation, firewall rule optimization, and improved network visibility.

Job description

Job Description

About the Role

Network Security Tech Lead is responsible for both leading and delivering enterprise network security operations. This role combines strategic leadership with hands-on technical execution to protect Mattels global network infrastructure across on-premises and cloud environments. The position oversees and contributes to the work of Network Security Engineers and Administrators, ensuring robust firewall, email, and web security, as well as Public Key Infrastructure (PKI) management and compliance with enterprise security standards.

The Tech Lead will drive delivery of secure, resilient, and scalable network security services while also acting as a subject matter expert (SME) and escalation point for complex troubleshooting, incident response, and architecture initiatives. This role requires deep technical expertise in Palo Alto Networks technologies, cloud security platforms, PKI, and WAF solutions, along with a commitment to operational excellence and continuous improvement.

Roles and Responsibilities

• Provide direct technical leadership and guidance to Network Security Engineers and Network administrators, ensuring delivery of secure and reliable network protection across enterprise and cloud infrastructures.
• Lead and actively participate in the deployment, operation, and optimization of Palo Alto Networks (PAN) firewalls (hardware and virtual), Prisma Access, GlobalProtect, and related services.
• Oversee configuration management, performance tuning, and security policy enforcement across global firewall environments.
• Manage and maintain enterprise Public Key Infrastructure (PKI), including certificate lifecycle management with tools such as Keyfactor, Venafi, or equivalent, and integrations with external Certificate Authorities (GlobalSign, Entrust, DigiCert).
• Lead configuration, customization, and maintenance of Web Application Firewalls (WAF) (e.g., Imperva) to safeguard applications and APIs, resolving rule conflicts and performance issues.
• Oversee Email Security Gateways (e.g., Checkpoint Harmony, Proofpoint) and related O365 mail routing and DNS security configurations.
• Participate in high-severity incident response, threat mitigation, and root cause analysis alongside infrastructure and SOC teams.
• Develop and maintain operational runbooks, standard operating procedures (SOPs), and technical documentation to support security operations, compliance, and audit readiness.
• Drive continuous improvement in firewall automation, rule optimization, and network visibility using modern tools and analytics.
• Collaborate with enterprise architects, SOC teams, and application owners to align network security initiatives with business and compliance objectives.
• Lead or contribute to design discussions, roadmap planning, and implementation of emerging technologies such as Zero Trust network architecture and cloud-native security controls.
• Mentor engineers, foster professional growth, and promote a culture of accountability and delivery excellence.
• Participating in after-hours support rotation for major outages or critical incidents as needed.

Skills and Qualifications

Required:

• 10+ years of experience in Network Security operations, including at least 5 years in a tech lead role or senior engineering capacity within a large enterprise.
• Proven expertise with Palo Alto Networks firewalls, Prisma Access, Global Protect, and related security platforms.
• Experience managing WAF, Email Security, and PKI environments, including integration with cloud services (Azure, AWS, GCP).
• Proficiency in firewall rules are optimization, troubleshooting, and automation.
• Deep understanding of network protocols, VPNs, RADIUS/TACACS+, and cloud networking architectures.
• Familiarity with Windows and Linux systems administration and integration.
• Experience supporting compliance and audit initiatives (e.g., SOX, NIST CSF, PCI).
• Strong leadership, communication, and decision-making skills, with a demonstrated ability to mentor and manage technical teams.
• Ability to collaborate effectively with cross-functional teams and vendors.

Preferred:

• Bachelor's degree in information technology, Cybersecurity, or related discipline.
• Certifications such as PCNSE, CCNP Security, CCSP, or GIAC (GSEC).
• Experience with ServiceNow ITSM processes and workflow automation.
• Familiarity with Zero Trust Network Access (ZTNA) and SASE frameworks.
• Scripting and automation experience (PowerShell, Python, or REST APIs).

Shift Timing:

• Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events