Sr Engineer - Captive Operations

Tata Communications Limited; Chennai District; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

Tata Communications Limited is seeking a Network Engineer specializing in Load Balancing, Firewall (Cisco & Fortigate), and Network Switches. The role emphasizes managing firewall operations, policy rules, and security posture across complex environments.

Responsibilities include vulnerability management, VPNs, HA configurations, and collaboration with SOC and clients to ensure secure, reliable connectivity. Strong experience with FortiGate, Cisco ASA, F5 LBs, and PAM is preferred.

Qualifications

• Hands-on experience with 2-3 firewall technologies (FortiGate, Cisco ASA, etc.).
• Strong understanding of firewall rule base optimization, NAT policies, and traffic analysis.
• Experience with IDS/IPS and Web Application Firewalls (WAFs).
• Hands-on experience with PAM solutions, preferably Arcon PAM (8-12 months+).
• Perform RCA for major security incidents and collaborate with SOC teams.

Responsibilities

• Oversee day-to-day firewall operations, including policy management, rule implementation, and configuration changes.
• Ensure compliance with security policies, industry best practices, and regulatory requirements.
• Drive process improvements and automation to enhance network security efficiency.
• Engage with vendors to resolve product-related issues and guide incident response.

Skills

Firewall

FortiGate

Cisco ASA

F5 Load Balancer

WAF

L2 Switches

Arcon PAM

Tools

FortiGate

Cisco ASA

Nexus

Job description

About The Company

Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications

Position

Network Engineer (Load Balancing, Firewall - Cisco & Fortigate, Network Switches)

Technology Skills (Must-Have)

• Firewall (Cisco & Fortigate)
• F5 Load Balancer & WAF
• L2 Switches (Nexus, Cisco, etc.)
• Arcon PAM (Privileged Access Management)

Working Hours (Must)

24x7 Rotational Shifts

• Operations Management:
  • Oversee day-to-day firewall operations, including policy management, rule implementation, and configuration changes.
  • Ensure compliance with security policies, industry best practices, and regulatory requirements.
  • Drive process improvements and automation to enhance network security efficiency.
• Network Security Administration & Threat Management:
  • Firewall & Perimeter Security:
    • Hands-on experience with at least 2-3 firewall technologies (e.g., FortiGate, Cisco ASA).
    • Strong understanding of firewall rule base optimization, NAT policies, and traffic flow analysis.
  • Threat Detection & Security Solutions:
    • Experience with IDS/IPS and Web Application Firewalls (WAFs).
    • Hands-on experience with Privileged Access Management (PAM) solutions, preferably Arcon PAM (8-12 months+ experience).
    • Analyze and monitor network security events, identifying potential threats and vulnerabilities.
  • Incident Response & RCA:
    • Perform Root Cause Analysis (RCA) for major security incidents related to network security products.
    • Engage with OEMs and vendors to resolve product-related issues.
    • Collaborate with SOC and IT security teams to enhance security monitoring and threat intelligence.
• Advanced Network Security Operations:
  • VPN Configuration & Management:
    • Design and implement site-to-site and remote-access VPNs across multiple vendor platforms.
  • High Availability & Clustering:
    • Configure and manage clustering and failover mechanisms for security appliances and load balancers.
  • Load Balancing & Traffic Optimization:
    • Configure, manage, and optimize F5 Local Load Balancer solutions for high availability.
• Technical Documentation & Knowledge Management:
  • Develop and maintain L2/L3 SOPs, Runbooks, and Known Error Databases (KEDB).
  • Document security incidents, troubleshooting steps, and best practices for reference and training.
• Client Management & Stakeholder Engagement:
  • Client Relationship Management:
    • Act as a primary point of contact for client escalations, ensuring timely and effective resolution of security concerns.
    • Foster strong client relationships by addressing their security needs and providing proactive solutions.
  • Incident Communication & Reporting:
    • Provide regular updates and detailed reports to clients on their network security posture, incident status, and ongoing improvements.
    • Conduct periodic security reviews and technical presentations for stakeholders.
  • Service Level Agreements (SLA) & Compliance:
    • Ensure adherence to SLA commitments, responding to and resolving client issues within agreed timelines.
    • Implement security solutions that align with client policies, regulatory requirements, and compliance standards.
  • Security Consulting & Advisory:
    • Work closely with clients to assess risks, recommend security enhancements, and support future planning.
    • Stay updated with emerging threats and evolving cybersecurity trends to provide expert guidance.
  • Additional Technical Skills (Preferred):
    • Hands-on experience with Nexus 3000 switches (preferred).
    • Strong understanding of routing technologies and network fundamentals.
    • Continuous Learning & Innovation:
      • Stay up to date with industry trends, threat landscapes, and emerging security technologies.
      • Encourage upskilling and cross-training within the team to improve expertise in evolving security domains.
      • Identify automation opportunities to enhance operational efficiency and reduce manual effort.