Network_Security_Techinical_Lead

About the Role
In this position, you will own the end-to-end architecture, design, deployment, and 24/7 operational management of secure network and security infrastructure across cloud (Azure, GCP, OCI) and on-premises environments. You will act as the technical authority responsible for designing highly available, resilient architectures, leading deployments, configuring new environments, and ensuring that the infrastructure remains stable, secure, and audit-ready. This role requires a skilled professional who can prepare operational reports and presentations, run operational meetings, handle escalations, manage major changes, and maintain hands-on accountability for daily operations.

Responsibilities

• Design secure reference architectures for hub-spoke topologies, VNet/VPC/VCN environments, subnetting, IP/CIDR planning, and static/BGP dynamic routing across Azure, GCP, and OCI, as well as on-prem routing and switching infrastructure.
• Architect secure connectivity patterns — VPN, peering, and dedicated interconnects (ExpressRoute, Interconnect, FastConnect) — and lead network security design reviews with actionable, best-practice recommendations.
• Lead deployment and configuration of network security environments: Site-to-Site VPNs with redundant tunnels and BGP routing, VPC/VCN peering, NSGs, security lists/ACLs, NVAs, next-gen firewalls, and Internet/NAT/Service Gateways for new builds and migrations.
• Design, deploy, and operate infrastructure to meet 24/7 availability targets, including redundancy, failover, load balancing, and disaster recovery across hybrid and multi-cloud environments.
• Own round-the-clock operational management of the network and security environment: change management, patching/upgrades of NVAs, vulnerability tracking and remediation, and coordination of patch windows and incident response.
• Manage and oversee day-to-day network and security operations across routing, switching, and cybersecurity engineering, keeping leadership informed of status, risks, and escalations.
• Configure and maintain monitoring, logging, and diagnostics (Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, flow logs) to proactively detect and resolve availability, performance, and security issues.
• Harden network device and cloud configurations against industry benchmarks (e.g., CIS, NIST) and internal security baselines; remediate findings from internal/external audits.
• Prepare and present operational reports, dashboards, and presentations summarizing network/security performance, availability, incidents, and risk posture to leadership and stakeholders.
• Plan and run operational meetings — daily/weekly stand-ups, service reviews, and incident review sessions — driving action items to closure.
• Act as the senior escalation point for critical operational and security issues across all managed platforms, ensuring timely resolution and clear communication.
• Own and handle major changes end-to-end — planning, risk assessment, change advisory board (CAB) submissions, implementation, and post-change validation — with minimal impact to 24/7 availability.
• Design, deploy, and validate backup and restore procedures for NVAs, firewall policies, and network configuration state; own disaster recovery and cross-region DR networking design.
• Coordinate cross-functional activities with cloud, security, application, and operations teams to ensure consistent security posture and always-on availability across the environment.
• Maintain accurate architecture documentation, network diagrams, runbooks, and operational procedures; ensure changes follow proper governance, risk, and change-control processes.
• Mentor engineers and act as a point of technical escalation for complex operational or security issues.
• Participate in an on-call rotation and respond to critical incidents outside business hours to maintain 24/7 availability; travel to datacenter or client sites as needed.

Qualifications

• 10–12 years of experience in cloud infrastructure, network operations, and cybersecurity engineering, including hands-on ownership of designing, deploying, and operating secure network infrastructure.
• Demonstrable depth across at least two of Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure (all three strongly preferred).
• Proven experience designing and operating infrastructure to meet 24/7 availability, redundancy, and disaster recovery requirements.
• Demonstrated experience overseeing or coordinating multi-disciplinary operations (network + security) and reporting outcomes to leadership.
• Strong skills in preparing operational reports, dashboards, and presentations for leadership and stakeholder audiences.
• Proven track record running operational meetings and driving structured escalation handling to resolution.
• Hands-on experience managing major changes, including change planning, risk assessment, CAB processes, and post-implementation review.
• Hands-on expertise with enterprise routers, switches, firewalls, NVAs, and cloud-native network security monitoring tools.
• Experience hardening network and cloud infrastructure against security frameworks and remediating audit findings.
• Strong troubleshooting and incident-response experience across routing, switching, cloud networking, and security domains.
• Excellent coordination and communication skills, with the ability to work closely with leadership and cross-functional stakeholders.
• Willing and able to participate in an on-call rotation and travel to datacenter/client sites as needed to maintain 24/7 availability.

Required Certifications

• Cisco CCNP (Enterprise / Security) or equivalent vendor-neutral routing & switching certification.
• Microsoft Certified: Azure Network Security Engineer Associate (or Azure Solutions Architect Expert).
• Google Professional Cloud Network Engineer / Cloud Security Engineer.
• Oracle Cloud Infrastructure (OCI) Network Security Professional or Architect Professional.
• CISSP (Certified Information Systems Security Professional) or working toward certification.
• Firewall/NGFW vendor certification (e.g., Palo Alto PCNSA/PCNSE, Fortinet NSE, or Check Point CCSA/CCSE).

Preferred: CCIE, CISM, CEH. At least two of Azure, GCP, and OCI required; all three strongly preferred. Certifications must be current; equivalent recognized credentials considered subject to approval.