Infra & Network Security Lead

Responsibilities:

• Manage and guide the security team responsible for infrastructure and network security.
• Monitors network performance, troubleshoots issues and deploys solutions
• Manage front-line technical support to end users on various technical issues and problems regarding their Access
• Perform SME role and work on complex technical issues in Firewall, VPN and Proxy.
• Familiarity with Service Management tools (eg:ISM/ Service Now/BMC remedy) for the logging and tracking of incidents, and service requests
• Implement and manage continuous security monitoring solutions for infrastructure and network components

Requirements:

• 10-13+ years of Cyber security for Firewall, Proxy, VPN IPS
• Working experience, having played roles as VPN end-to-end implementation.
• Strong reliability and high quality and security awareness.
• Knowledge of web and application servers (Apache/IIS/Tomcat/Websphere)
• Perform SME role and work on complex technical issues in Firewall, VPN and Proxy.
• Candidate should have experience in Zscaler private Access (ZPA) VPN end-to-end implementation.
• Experience in Deep troubleshooting experience with Zscaler VPN and other Firewalls.
• Knowledge of ITIL incident and problem management.
• Knowledge of Security Incident Event Management ( IBM QRader SIEM) is a add on
• Must be familiar with Network Protocol Analyzers (tcpdump, Wireshark)
• Must have deep understanding of network protocols and network security TCP/IP, UDP, DHCP, FTP, SFTP, SNMP, SMTP, SSH, SSL, DNS, RDP, HTTP and HTTPS.
• The network security SME possesses the technical hand on capability and experience to assess current network security posture, document current/future state, provide roadmap/gap analysis for implementation activities
• Good understanding of financial domain and Security IT.
• Good to have experience with other security solutions like Firewall – Checkpoint or Palo Alto etc. Knowledge of Linux and web application servers (Apache/IIS/Tomcat)
• Hands on experience on Firewall (Palo Alto, CISCO), VPN (Zscaler), Proxy (forward, Reverse, Transparent and Web 2.0), SSL interception/MITM & Data leakage space, Security Analytics. Implementation, customization, coding, Support.