Network Security - Sr. Engineer/Lead

Iris Software, Inc.; Dadri, Pune District, Gurugram District; Hybrid; INR 300,000 - 600,000; Full time

Job summary

Iris Software, Inc. is seeking an experienced Senior Network Engineer to design, implement, and operate the enterprise network layer of our cloud platform. You will manage hub-and-spoke topologies, Azure Virtual WAN, and hybrid connectivity to on‑premises networks.

The role requires hands-on Azure networking, firewall design, BGP, and SD-WAN experience, plus IaC with Terraform. You will coordinate with Security and DevOps teams and support multi-region onboarding.

Qualifications

• 5+ years of overall experience, including 3+ years designing and operating enterprise network infrastructure.
• Hands-on Azure networking experience: Virtual WAN, VNets, routing, private endpoints, ExpressRoute/VPN.
• Experience with next-generation firewalls (Palo Alto preferred) including policy design, traffic inspection and SD-WAN integration.
• Strong understanding of routing protocols (BGP), DNS, and network segmentation.
• Experience with SD-WAN technologies and edge router configuration.
• Familiarity with Infrastructure-as-Code for network deployment (Terraform or equivalent).
• Experience monitoring network health and troubleshooting connectivity/performance issues in a hybrid cloud environment.
• Bachelor's degree in Computer Science, Engineering or a related field (or equivalent experience).

Responsibilities

• Design, implement and operate the network and connectivity layer of the enterprise cloud platform, including hub-and-spoke/Azure Virtual WAN topologies and hybrid connectivity to on-premises and member-firm networks.
• Configure and manage edge routing, BGP peering and DNS architecture across cloud and on-premises environments. Implement and manage centralized firewall and traffic inspection, including firewall policies, NSG patterns and routing intent aligned to approved security baselines.
• Integrate network and firewall telemetry with monitoring and SIEM tooling, and support firewall platform migrations (e.g. Panorama to Strata Cloud Manager).
• Monitor network health and performance, respond to incidents and escalations, and support disaster recovery planning and testing.
• Maintain network documentation and runbooks covering onboarding, troubleshooting, DR recovery and escalation.
• Deploy and maintain network infrastructure through approved Infrastructure-as-Code, and partner with Cloud/Platform Architects, Security and DevOps teams to align network design with platform requirements. Support onboarding of new regions, hubs and connectivity requirements as the platform scales.

Skills

Azure networking

BGP routing

Firewall design

SD-WAN

Terraform

Network monitoring

DNS architecture

Edge routing

Education

Bachelor's degree in Computer Science or Engineering

Tools

Terraform

Panorama

Strata Cloud Manager

AZ-700

Job description

Key Responsibilities

• Design, implement and operate the network and connectivity layer of the enterprise cloud platform, including hub-and-spoke/Azure Virtual WAN topologies and hybrid connectivity to on-premises and member-firm networks.
• Configure and manage edge routing, BGP peering and DNS architecture across cloud and on-premises environments. Implement and manage centralized firewall and traffic inspection, including firewall policies, NSG patterns and routing intent aligned to approved security baselines.
• Integrate network and firewall telemetry with monitoring and SIEM tooling, and support firewall platform migrations (e.g. Panorama to Strata Cloud Manager).
• Monitor network health and performance, respond to incidents and escalations, and support disaster recovery planning and testing.
• Maintain network documentation and runbooks covering onboarding, troubleshooting, DR recovery and escalation.
• Deploy and maintain network infrastructure through approved Infrastructure-as-Code, and partner with Cloud/Platform Architects, Security and DevOps teams to align network design with platform requirements. Support onboarding of new regions, hubs and connectivity requirements as the platform scales.

Requirements

• 5+ years of overall experience, including 3+ years designing and operating enterprise network infrastructure.
• Hands-on experience with Azure networking: Virtual WAN, VNets, routing, private endpoints, ExpressRoute/VPN.
• Experience with next-generation firewalls (Palo Alto preferred), including policy design, traffic inspection and SD-WAN integration.
• Strong understanding of routing protocols (BGP), DNS (public/private/hybrid resolution) and network segmentation.
• Experience with SD-WAN technologies and edge router configuration.
• Familiarity with Infrastructure-as-Code for network deployment (Terraform or equivalent).
• Experience monitoring network health and troubleshooting connectivity/performance issues in a hybrid cloud environment.
• Bachelors degree in Computer Science, Engineering or a related field (or equivalent experience).

Good to Have

• Palo Alto or Cisco certifications (PCNSE, CCNP, CCIE).
• Azure networking certification (AZ-700).
• Experience with Strata Cloud Manager or Panorama.Exposure to multi-region or multi-cloud network design (including GCP networking).
• Experience in regulated or large enterprise environments.