Senior Network Security Engineer

Agivant; Pune District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Agivant Technologies India Private Limited is shaping secure, automated enterprise networks. The role focuses on securing LAN/WAN, data centers, and cloud access while implementing automation across security tasks and configurations.

The candidate will work in a security-minded team, maintaining documentation, and advancing Zero Trust architectures and best-practice controls in a global environment.

Qualifications

• Experience with network security tooling and automation in large-scale environments.
• Proficiency in configuring and securing enterprise network infrastructures.
• Knowledge of security frameworks (NIST, CIS, STIG) and secure coding practices.

Responsibilities

• Design, configure, deploy, monitor, and troubleshoot production network infrastructure and services.
• Develop and enforce network security policies and procedures.
• Manage SASE, firewalls, VPNs, and Zero Trust solutions.
• Automate deployment configurations and environments to improve speed and consistency.
• Conduct security audits and assess network risks per industry frameworks.
• Maintain network security design documentation and diagrams.

Skills

Python

Ansible

OpenStack

Terraform

REST API automation

NIST CIS STIG

MFA SSO SAML

Zero Trust

Education

Bachelor's degree

Master’s degree (preferred)

Tools

Cisco ACI

Aruba ClearPass

Palo Alto Zscaler

SASE solutions

Versa routers

Job description

Agivant Technologies India Private Limited | Full time

Agivant is a new-age AI-First Digital and Cloud Engineering services company that drives Agility and Relevance for our client's success.

Powered by cutting-edge technology solutions that enable new business models and revenue streams, we help our clients achieve their trajectory of growth.

Agility is a core muscle, an integral part of the fabric of a modern enterprise. To succeed in an ever-changing business environment, every modern organization needs to adapt and renew itself quickly. We help foster a more agile approach to business to reconfigure strategy, structure, and processes to achieve more growth and drive greater efficiencies.

Relevance is timeless and is the only way to survive and thrive.

The quest for relevance defines the exponential acceleration of humanity. This has presented us with a slew of opportunities, but also many unprecedented challenges. With technology-led innovation, we help our customers harness these opportunities and address myriad challenges.

Job Description

About the Role

We are shaping the era of pervasive intelligence — wheresmart systems, AI-powered innovation, and advanced silicon design define howthe world connects and computes.

This role is built for security-minded engineers who lovesolving complex technical problems, automating repetitive tasks, and learningcutting-edge tools across cloud, networking, and cybersecurity domains. Youwill support global infrastructure — spanning data centers, cloud environments,and secure enterprise networks — while developing automation solutions thatenhance speed, consistency, and security. You are eager to grow and learn,embracing new challenges and opportunities to advance your career in networksecurity.

You will be responsible for supporting all global networkservices, including LAN, WAN, data center, remote access, wireless, andfirewall security. The team manages a global data center footprint of over 12megawatts of power, 12 colocation data centers, 10 on-prem data centers, andover 50,000 servers.

What You’ll Be Doing

• Design,configure, deploy, monitor, and troubleshoot production network infrastructureand associated services.
• Designand implement network security standards and access controls following NISTframeworks.
• Developand implement network security policies and procedures.
• Designand implement campus and data center macro- and micro-segmentation policies.
• Utilizeautomation tools and scripts to standardize deployment configurations andenvironments.
• Monitorand analyze networks for potential security threats and vulnerabilities.
• Managenetwork security infrastructure including SASE, firewalls, VPNs, and ZTAsolutions.
• Helpmaintain and advance Zero Trust Architecture adoption.
• Developand enforce best-practice security standards, compliance, and governance.
• Conductexternal and internal security audits and assessments to identify potentialrisks and vulnerabilities in the network infrastructure, adhering toindustry-standard cybersecurity frameworks.
• Stayup to date on emerging network security threats and proofs of concept.
• Createand maintain documentation of network security designs, processes, andprocedures.
• Identifyand solve problems related to overall security infrastructure performance,efficiency, and availability in a timely manner.
• Contributeto network and security support ticketing and provide timely resolution forend-user issues.
• Fine-tuneand adapt compliance automation scripts for new solutions.

The Impact You’ll Have

• Improvereliability and speed of security operations through automation and AI tools.
• Enhancethe organization’s network security posture through the implementation of newvendor solutions.
• Ensurecompliance with network security standards, governance, and industry bestpractices.
• Providecritical support for global remote field offices and data centers, ensuringsecure and reliable network connectivity.
• Utilizeautomation to streamline deployment configurations, improving efficiency andconsistency.
• Supportthe advancement and maintenance of Zero Trust Architecture, reinforcing theorganization’s security framework.
• Contributeto the resolution of network security issues, minimizing downtime and ensuringbusiness continuity.

Requirements

What You’ll Need

• 7 +years of experience working on current, industry-leading (Gartner Leaders)technologies.
• Bachelor’sdegree or equivalent work experience.
• Proficiencyin network configuration management and automation tools (Python, Ansible,OpenStack, Terraform).
• Familiaritywith REST API automation and configuration-management secure coding.
• Generalknowledge of NIST, CIS Benchmark, and/or STIG security frameworks.
• Strongexperience with zero-day mitigation and remediation.
• Experiencewith MFA, SSO, and SAML deployment.
• Certificationssuch as PCNSE, ZIA/ZPA, CCNP, CCDP, CCIE, CISSP, CCDE, CEH, or Security+ (orequivalent work experience) are a strong plus.
• Familiaritywith Cisco ACI and application service chaining.
• Familiaritywith Aruba ClearPass NAC.
• Deepunderstanding of network security systems and protocols such as IPSec, IKE,GRE, TACACS, RADIUS, 802.1x, OSPF, DMVPN, BGP, and SD-WAN.
• Experienceconfiguring and troubleshooting Cisco, Versa, and Aruba devices.
• Experienceconfiguring Palo Alto, Zscaler, and SASE solutions.
• Knowledgeof frontier AI threat risk and prevention.
• Abilityto work after hours to support projects and maintenance activities.
• Well-versedin automation and scripting tools such as Python and Ansible.
• Abilityto create best-practice secure environment diagrams and documentation.
• Abilityto quickly learn new or unfamiliar technologies and products usingdocumentation and online resources.
• Strongverbal, written, interpersonal, and communication skills.

Good to Have

• Knowledgeof quantum-resistant encryption and migration planning.
• Exposureto AI/ML frameworks such as scikit-learn, PyTorch, or Azure ML.
• Cloudexperience in GCP, Azure, and AWS.
• Experienceworking in a global team environment and solving problems independently.
• Master’sdegree in Network or Computer Engineering, Computer Science, or Cybersecurity.