Network Security Policy Engineer

Jobgether SRL; India; Remote; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Remote work

Health benefits

Retirement plans

Performance incentives

Equity opportunities

Paid time off

Parental leave

Collaborative culture

Professional growth

Meaningful security impact

Inclusive workplace

Job summary

Jobgether SRL in India is seeking a Network Security Policy Engineer to strengthen network security across a hybrid infrastructure. You will audit firewall rules, review connectivity requests, and implement least-privilege controls to reduce exposure.

Automation will be built to validate policies and prevent drift into production. You will collaborate with engineering and infra teams, using Python scripting and APIs to improve visibility and enforce security standards while continuously

Qualifications

• Three+ years in network engineering, security, or infra ops in large-scale production.
• Hands-on with Juniper SRX or Palo Alto firewall policies, logs, and captures.
• Strong TCP/IP, NAT, DNS, and ACL design across devices and cloud.
• Understanding of network security zones, segmentation, and least-privilege access.
• AWS networking experience including VPCs, transit gateways, and security groups.
• Python scripting for API queries, firewall rule parsing, and automation.
• Clear written communication and stakeholder management.

Responsibilities

• Audit firewall rules, segmentation policies, and zone-to-zone access controls to identify gaps.
• Assess security posture, document findings, and recommend improvements for policy compliance.
• Review connectivity requests, validate against security models, propose alternatives when needed.
• Configure and troubleshoot firewall policies, ACLs, routing, and segmentation changes with change management.
• Manage temporary ACLs and policy exceptions with clear ownership and expirations.
• Develop automated policy validation checks to catch non-compliant configurations before production.
• Implement and maintain automation to replace manual governance and improve efficiency.
• Apply least-privilege across devices, hosts, and cloud environments.
• Collaborate with engineering to resolve connectivity challenges while balancing needs.
• Leverage scripting, APIs, and policy governance tools to improve visibility and detect drift.
• Utilize AI-assisted tools judiciously to aid problem solving and validate outputs.

Skills

Firewall policies

Python scripting

AWS networking

TCP/IP

ACL design

Network security

Tools

Juniper SRX

Palo Alto

GitHub Actions

Tufin

Illumio

Job description

his position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Network Security Policy Engineer based in India.

Join an engineering team dedicated to strengthening network security across a complex hybrid infrastructure. In this role, you will help ensure that network access policies remain secure, compliant, and aligned with application requirements. You will audit firewall rules, evaluate connectivity requests, and implement least-privilege access controls to reduce unnecessary exposure and security risks. Working closely with application, platform, and infrastructure teams, you will translate business connectivity needs into effective and secure network policies. You will also develop automation to streamline policy governance, detect configuration drift, and prevent non-compliant changes from reaching production. This opportunity is ideal for a network security professional who combines strong technical expertise with analytical thinking, clear communication, and a passion for continuous improvement.

Accountabilities:

• Audit firewall rules, network segmentation policies, and zone-to-zone access controls to identify overly permissive, unused, shadowed, or misconfigured rules.
• Assess network security posture and risk exposure, documenting findings and recommending improvements to strengthen policy compliance.
• Review connectivity requests from application and platform teams, validate them against approved security models, and propose alternative solutions when requests do not meet established standards.
• Configure, maintain, and troubleshoot firewall policies, access control lists (ACLs), routing rules, and network segmentation changes while following rigorous change-management procedures.
• Manage temporary ACLs and policy exceptions throughout their lifecycle, ensuring clear ownership, appropriate expiration dates, and timely remediation.
• Develop and maintain automated policy validation checks to identify non-compliant configurations before they reach production.
• Replace repetitive manual governance activities with reliable, repeatable automation that improves operational efficiency and policy consistency.
• Apply least-privilege principles across network devices, hosts, and cloud environments to ensure applications receive only the access they genuinely require.
• Collaborate with engineering and infrastructure teams to resolve connectivity challenges while balancing operational requirements.
• Use scripting, APIs, and policy governance tools to improve visibility, simplify policy reviews, and detect configuration drift.
• Leverage AI-assisted tools to investigate technical problems and improve productivity while critically assessing their accuracy and limitations.

Requirements:

• At least three years of experience in network engineering, network security, or infrastructure operations within a large-scale production environment.
• Hands-on experience managing enterprise firewall policies using platforms such as Juniper SRX or Palo Alto Networks, including troubleshooting through logs and packet captures.
• Strong knowledge of TCP/IP, routing, Network Address Translation (NAT), and Domain Name System (DNS), with the ability to design and manage ACLs across network devices, hosts, and public cloud environments.
• A solid understanding of network security zones, segmentation, and least-privilege access principles.
• Practical knowledge of AWS networking, including Virtual Private Clouds (VPCs), transit gateways, and security groups.
• Proficiency in Python scripting for querying APIs, parsing firewall rules and log data, and automating recurring operational tasks.
• Strong written communication skills and experience managing technical requests from initial assessment through implementation and follow-up.
• The ability to work effectively with engineering teams, understand application connectivity requirements, and recommend secure alternatives when requested access is inappropriate.
• Experience using AI-powered tools to solve practical technical problems, together with the judgment to validate their output and recognize their limitations.
• Strong analytical, troubleshooting, and problem-solving skills, with attention to detail and a proactive approach to risk management.
• Effective collaboration and stakeholder management skills, with the ability to explain security requirements clearly to technical teams.

The following qualifications are advantageous:

• Experience with network security policy governance tools such as Tufin or comparable platforms.
• Familiarity with microsegmentation technologies, including Illumio.
• Experience implementing policy-as-code workflows using Git and CI/CD tools such as GitHub Actions.
• Exposure to intrusion detection and prevention systems (IDS/IPS) or Network Detection and Response (NDR) platforms.
• Relevant professional certifications, such as JNCIS, PCNSE, CCNP Security, or AWS Advanced Networking.
• A willingness to learn new technologies and contribute to evolving network security practices.

Benefits:

• Remote work: Work from home in India, with occasional office visits for team meetings or events.
• Competitive health benefits: Access to healthcare coverage designed to support employee well-being, subject to location-specific policies.
• Retirement and financial planning: Potential access to retirement savings programs and other financial benefits, depending on regional eligibility.
• Performance incentives: Eligibility for bonus or incentive programs, according to applicable employment terms.
• Equity opportunities: Potential access to equity grants and an employee stock purchase plan, subject to role and location.
• Paid time off: Vacation and paid leave benefits in accordance with company policies and applicable local requirements.
• Family-friendly benefits: Support that may include parental leave and other family-oriented benefits.
• Collaborative engineering culture: Work with engineering and infrastructure professionals who value experimentation, knowledge sharing, and continuous learning.
• Professional growth: Opportunities to deepen your expertise in enterprise network security, cloud networking, policy governance, and automation.
• Meaningful security impact: Help protect production infrastructure by improving access controls, reducing exposure, and strengthening security governance at scale.
• Inclusive workplace: Join an environment that values diverse perspectives, equal opportunity, and a sense of belonging.