Infrastructure Security Engineer

About Gruve Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position Summary We are looking for Infrastructure Security Engineer for Device Management Team, having 5+ years of experience in Device Management. The team member will be responsible for the administration of the Security Devices like Next Gen Firewall.

Key Roles & Responsibilities Firewall Operations & Troubleshooting:

• Monitor, manage, and optimize firewall performance, health, and security.
• Perform advanced troubleshooting of firewall-related issues, working closely with L1 and L3 teams.
• Investigate security incidents, network anomalies, and connectivity issues.
• Fine-tune firewall rules, policies, and configurations for performance and security improvements.
• Work on packet captures and traffic analysis to diagnose network security issues.

Rule & Policy Management

• Review, implement, and modify firewall rules while ensuring security and compliance standards.
• Conduct firewall rule audits and remove redundant or obsolete rules.
• Manage access control policies, VPN configurations, and segmentation policies.
• Ensure compliance with organizational and regulatory security guidelines.

Incident & Change Management

• Act as an escalation point for L1 engineers and assist in resolving complex firewall issues.
• Participate in Root Cause Analysis (RCA) for recurring firewall incidents and recommend fixes.
• Handle firewall upgrades, patches, and firmware updates as per change management procedures.
• Support IT security and compliance teams in conducting risk assessments and vulnerability remediation.

BAU Operations & Automation

• Implement automation scripts for firewall monitoring and reporting.
• Optimize firewall logging, alerting, and monitoring for proactive security management.
• Coordinate with vendors and OEM support teams for hardware/software troubleshooting.

Documentation & Reporting

• Maintain up-to-date documentation on firewall configurations, rule changes, and security incidents.
• Prepare reports on firewall performance, threat activities, and policy violations.
• Provide training and mentorship to L1 engineers on firewall best practices.

Required Skills & Qualifications

• Bachelor’s degree in IT, Computer Science, or a related field.
• Relevant security/network certifications such as Cisco FTD/FMC, CCNP Security, Fortinet NSE 3+, Palo Alto PCNSA/PCNSE, Check Point CCSA/CCSE, Juniper JNCIS-SEC, or equivalent.

Basic Qualifications

• Bachelor’s degree in IT, Computer Science, or a related field.
• Relevant security/network certifications such as CCNP Security, Fortinet NSE 3+, Palo Alto PCNSA/PCNSE, Check Point CCSA/CCSE, Juniper JNCIS-SEC, or equivalent.
• Strong verbal and written communication and interpersonal skills.
• Strong analytical and problem-solving abilities.
• Ability to work with minimal levels of supervision or oversight.
• Ability to work in a 24x7 environment (if required) and manage escalations effectively.

Preferred Qualifications

• Bachelor’s degree in computer science or information technology.
• ITIL Foundation
• Experience in working in shifts and hands on experience with ITIL framework
• Worked on multiple clients’ environments and deployments

Why Gruve At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you. Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.