Security Network SME - Lead

Iris Software, Inc.; Dadri, Pune District, Gurugram District; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

Iris Software, Inc. in India is seeking an experienced Network Architect/Engineer to design, implement and operate the enterprise cloud connectivity. You will drive Azure Virtual WAN, SD-WAN, BGP and DNS across hybrid environments, while enforcing firewall policies and secure traffic inspection.

Collaborating with Security and DevOps, you will deploy via Terraform, manage telemetric data and support regional scale with DR planning and ongoing optimization.

Qualifications

• 6+ years IT experience, 3+ years in enterprise network design and operations.
• Hands-on Azure networking with Virtual WAN, VNets, ExpressRoute or VPN.
• Experience with next-gen firewalls (Palo Alto) and SD-WAN integration.
• IaC for network deployment using Terraform or equivalent.
• Understanding BGP, DNS, network segmentation and hybrid cloud.
• Bachelor's degree in CS/Engineering or equivalent.

Responsibilities

• Design and operate the network and connectivity layer for the enterprise cloud platform.
• Configure edge routing, BGP peering and DNS across cloud and on-prem.
• Manage centralized firewall and traffic inspection with NSG patterns.
• Integrate network telemetry with monitoring and SIEM tooling.
• Support disaster recovery planning and testing.
• Maintain network documentation and runbooks.
• Deploy and maintain network infra via IaC; collaborate with Cloud/Platform Architects, Security and DevOps.
• Support onboarding of new regions, hubs and connectivity as the platform scales.

Skills

Azure networking

BGP routing

SD-WAN

Firewall policies

DNS architecture

Terraform

Incident response

Network performance

IT security

Documentation

Education

Bachelor's degree in CS/Engineering

Tools

Palo Alto

Azure Virtual WAN

ExpressRoute

Strata Cloud Manager

Panorama

Terraform

Job description

Key Responsibilities

Design, implement and operate the network and connectivity layer of the enterprise cloud platform, including hub-and-spoke/Azure Virtual WAN topologies and hybrid connectivity to on-premises and member-firm networks.

Configure and manage edge routing, BGP peering and DNS architecture across cloud and on-premises environments. Implement and manage centralized firewall and traffic inspection, including firewall policies, NSG patterns and routing intent aligned to approved security baselines.

Integrate network and firewall telemetry with monitoring and SIEM tooling, and support firewall platform migrations (e.g. Panorama to Strata Cloud Manager).

Monitor network health and performance, respond to incidents and escalations, and support disaster recovery planning and testing.

Maintain network documentation and runbooks covering onboarding, troubleshooting, DR recovery and escalation.

Deploy and maintain network infrastructure through approved Infrastructure-as-Code, and partner with Cloud/Platform Architects, Security and DevOps teams to align network design with platform requirements. Support onboarding of new regions, hubs and connectivity requirements as the platform scales.

Requirements

6+ years of overall experience, including 3+ years designing and operating enterprise network infrastructure.

Hands-on experience with Azure networking: Virtual WAN, VNets, routing, private endpoints, ExpressRoute/VPN.

Experience with next-generation firewalls (Palo Alto preferred), including policy design, traffic inspection and SD-WAN integration.

Strong understanding of routing protocols (BGP), DNS (public/private/hybrid resolution) and network segmentation.

Experience with SD-WAN technologies and edge router configuration.

Familiarity with Infrastructure-as-Code for network deployment (Terraform or equivalent).

Experience monitoring network health and troubleshooting connectivity/performance issues in a hybrid cloud environment.

Bachelors degree in Computer Science, Engineering or a related field (or equivalent experience).

Good to Have

• Palo Alto or Cisco certifications (PCNSE, CCNP, CCIE).Azure networking certification (AZ-700).
• Experience with Strata Cloud Manager or Panorama.Exposure to multi-region or multi-cloud network design (including GCP networking).
• Experience in regulated or large enterprise environments.