Sr. Network Security Engineer with Juniper SRX

Birlasoft; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Birlasoft is seeking a Network Security Engineer in Bangalore to lead segmentation and Zero Trust initiatives using Juniper SRX across data center, campus, and cloud environments.

Responsibilities include defining granular firewall policies, collaborating with app teams to map dependencies, and integrating with SIEM/IAM/EDR for unified policy enforcement.

Qualifications

• 8–11 years of experience in network security engineering.
• Deep Juniper SRX expertise in segmentation and policy enforcement.
• Experience with cloud security and data center security.

Responsibilities

• Architect and implement network segmentation strategies using Juniper SRX firewalls across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement using firewall controls.
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation via firewall rules and security zones.
• Define and enforce granular security policies using zone-based segmentation, VRFs, and SRX policy constructs across hybrid environments.
• Integrate segmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.
• Lead adoption and standardization of Juniper SRX as the primary segmentation enforcement platform across enterprise environments.
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks).

Skills

Juniper SRX

Firewall design

Zero Trust

LAN/WAN security

Cloud security

VPN

NAC

SIEM

WAAP

DLP

Aruba/Arista

Tools

F5 GTM/LTM

AWS

Azure

GCP

Job description

Area(s) of responsibility

Skills: Network Security Engineer with Juniper SRX

Experience: 8-11 years

Location: Bangalore Only

Key Responsibilities

Segmentation & Zero Trust Responsibilities (Juniper SRX Focus)

• Architect and implement network segmentation strategies using Juniper SRX firewalls across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement using firewall controls.
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation via firewall rules and security zones.
• Define and enforce granular security policies using zone-based segmentation, VRFs, and SRX policy constructs across hybrid environments.
• Integrate segmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.
• Lead adoption and standardization of Juniper SRX as the primary segmentation enforcement platform across enterprise environments.
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks).

Network Security & Infrastructure

• Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC.
• Expertise in firewall architecture and design with strong hands-on experience in Juniper SRX (primary), along with Fortinet and Palo Alto.
• Deep expertise in:
  • Security zones, policies, NAT, routing
  • Application control and threat prevention
  • High-availability clustering and scale design
• Experience securing public and private cloud (AWS, Azure, GCP) environments.
• Design and implementation of Web Application and API Protection (WAAP) solutions.
• Strong experience in proxy (forward/reverse), load balancing, and application security integration.
• Experience with SDN and SD-WAN architectures, including segmentation use cases.

Networking & Protocol Expertise

• Strong knowledge of:
  • Routing protocols: BGP, OSPF, RIP, MPLS
  • Network services: DNS, DHCP, NTP
  • IPv4/IPv6 architecture and traffic management
• Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants).
• Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions.

Data Center & Infrastructure

• Experience managing enterprise data center environments with technologies including:
  • Aruba, Arista, Juniper switching
  • Firewalls, WAN optimization, IDS/IPS, DLP

Strong understanding of structured cabling and network facilities