Sr Engineer - Captive Operations

Tata Communications Limited; Chennai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Tata Communications Limited is seeking a Network Engineer focusing on Load Balancing and Firewall management. You will oversee firewall operations, implement security policies, and optimize traffic flow across FortiGate, F5, and Cisco platforms.

The role includes PAM integration, VPN support, and incident handling in a 24x7 rotational shift environment. Ideal candidates will have hands-on experience with L2 switches, Arcon PAM, and web application firewalls, with a proactive stance on automation

Qualifications

• Hands-on firewall operations and policy implementation.
• Experience with multiple firewall platforms (FortiGate, Cisco ASA).
• Strong knowledge of NAT policies, rule bases, and traffic flow analysis.
• Familiarity with Privileged Access Management (PAM) tools.
• Willingness to work in 24x7 rotational shifts.

Responsibilities

• Oversee day-to-day firewall operations, policy management, and config changes.
• Ensure compliance with security policies and regulatory requirements.
• Drive automation to improve network security efficiency.
• Manage VPN configurations, clustering, and high availability for security appliances.
• Document security incidents, troubleshooting steps, and best practices.
• Engage SOC/IT security teams and vendors to resolve issues.

Skills

Firewall (Cisco Fortigate)

F5 Load Balancer WAF

L2 Switches (Nexus)

Arcon PAM

Tools

Nexus 3000 switches

Job description

Position: Network Engineer (Load Balancing, Firewall - Cisco Fortigate, Network Switches)

Technology Skills (Must-Have):

- Firewall (Cisco Fortigate)

- F5 Load Balancer WAF

- L2 Switches (Nexus, Cisco, etc.)

- Arcon PAM (Privileged Access Management)

Working Hours: 24x7 Rotational Shifts (Must)

1. Operations Management:

• Oversee day-to-day firewall operations, including policy management, rule implementation, and configuration changes.
• Ensure compliance with security policies, industry best practices, and regulatory requirements.
• Drive process improvements and automation to enhance network security efficiency.

2. Network Security Administration Threat Management:

• Firewall Perimeter Security:
  • Hands-on experience with at least 2-3 firewall technologies (e.g., FortiGate, Cisco ASA).
  • Strong understanding of firewall rule base optimization, NAT policies, and traffic flow analysis.
• Threat Detection Security Solutions:
  • Experience with IDS/IPS and Web Application Firewalls (WAFs).
  • Hands-on experience with Privileged Access Management (PAM) solutions, preferably Arcon PAM (8-12 months+ experience).
  • Analyze and monitor network security events, identifying potential threats and vulnerabilities.
• Incident Response RCA:
  • Perform Root Cause Analysis (RCA) for major security incidents related to network security products.
  • Engage with OEMs and vendors to resolve product-related issues.
  • Collaborate with SOC and IT security teams to enhance security monitoring and threat intelligence.

3. Advanced Network Security Operations:

• VPN Configuration Management:
  • Design and implement site-to-site and remote-access VPNs across multiple vendor platforms.
• High Availability Clustering:
  • Configure and manage clustering and failover mechanisms for security appliances and load balancers.
• Load Balancing Traffic Optimization:
  • Configure, manage, and optimize F5 Local Load Balancer solutions for high availability.

4. Technical Documentation Knowledge Management:

• Develop and maintain L2/L3 SOPs, Runbooks, and Known Error Databases (KEDB).
• Document security incidents, troubleshooting steps, and best practices for reference and training.

5. Client Management Stakeholder Engagement:

• Client Relationship Management:
  • Act as a primary point of contact for client escalations, ensuring timely and effective resolution of security concerns.
  • Foster strong client relationships by addressing their security needs and providing proactive solutions.
• Incident Communication Reporting:
  • Provide regular updates and detailed reports to clients on their network security posture, incident status, and ongoing improvements.
  • Conduct periodic security reviews and technical presentations for stakeholders.
• Service Level Agreements (SLA) Compliance:
  • Ensure adherence to SLA commitments, responding to and resolving client issues within agreed timelines.
  • Implement security solutions that align with client policies, regulatory requirements, and compliance standards.
• Security Consulting Advisory:
  • Work closely with clients to assess risks, recommend security enhancements, and support future planning.
  • Stay updated with emerging threats and evolving cybersecurity trends to provide expert guidance.

6. Additional Technical Skills (Preferred):

• Hands-on experience with Nexus 3000 switches (preferred).
• Strong understanding of routing technologies and network fundamentals.

7. Continuous Learning Innovation:

• Stay up to date with industry trends, threat landscapes, and emerging security technologies.
• Encourage upskilling and cross-training within the team to improve expertise in evolving security domains.
• Identify automation opportunities to enhance operational efficiency and reduce manual effort.