Senior Network Security Engineer

Birlasoft Limited; Bengaluru; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Birlasoft Limited is seeking a Senior Network Security Engineer focused on Juniper SRX for Bangalore. You will architect segmentation, implement Zero Trust controls, and enforce granular security policies across data center, campus, and cloud environments.

You will collaborate with owners to map dependencies and standardize firewall-based policy enforcement. The role requires hands-on experience with SRX firewalls, VPNs, NAC, and integration with SIEM, IAM, EDR/XDR, and cloud-native controls to

Qualifications

• 8–11 years of experience in network security engineering.
• Hands-on Juniper SRX with segmentation and policy enforcement.
• Strong understanding of Zero Trust and least-privilege access.

Responsibilities

• Architect segmentation strategies using Juniper SRX across data center, campus, and cloud.
• Design and implement Zero Trust Architecture with policy enforcement.
• Collaborate with application owners to map dependencies for policy-driven segmentation.
• Integrate segmentation with SIEM, IAM, EDR/XDR, and cloud controls.
• Lead adoption of Juniper SRX as primary segmentation platform.
• Develop governance and policy lifecycle aligned to CIS/NIST/Zero Trust.

Skills

Juniper SRX

Zero Trust

Firewall Architecture

Policy Enforcement

SIEM

NAC

VPN

EDR/XDR

WAAP

Tools

F5 GTM/LTM

Aruba

Arista

Juniper SRX Firewall

Job description

Sr. Network Security Engineer with Juniper SRX Area(s) of responsibility Skills: Network Security Engineer with Juniper SRX Experience: 8-11 years Location: Bangalore Only

Key Responsibilities Segmentation & Zero Trust Responsibilities (Juniper SRX Focus)

• Architect and implement network segmentation strategies using Juniper SRX firewalls across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement using firewall controls.
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation via firewall rules and security zones . Define and enforce granular security policies using zone-based segmentation, VRFs, and SRX policy constructs across hybrid environments.
• Integrate segmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.
• Lead adoption and standardization of Juniper SRX as the primary segmentation enforcement platform across enterprise environments.
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks).

Network Security & Infrastructure

Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC. Expertise in firewall architecture and design with strong hands-on experience in Juniper SRX (primary), along with Fortinet and Palo Alto. Deep expertise in: Security zones, policies, NAT, routing Application control and threat prevention High-availability clustering and scale design Experience securing public and private cloud (AWS, Azure, GCP) environments. Design and implementation of Web Application and API Protection (WAAP) solutions. Strong experience in proxy (forward/reverse), load balancing, and application security integration. Experience with SDN and SD-WAN architectures, including segmentation use cases.

Networking & Protocol Expertise

Strong knowledge of: Routing protocols: BGP, OSPF, RIP, MPLS Network services: DNS, DHCP, NTP IPv4/IPv6 architecture and traffic management Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants). Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions.

Data Center & Infrastructure

Experience managing enterprise data center environments with technologies including: Aruba, Arista, Juniper switching Firewalls, WAN optimization, IDS/IPS, DLP Strong understanding of structured cabling and network facilities.

Experience Level Senior Level