Lead IT Security Engineer

Lead IT Security Engineer

Job Summary

The Senior IT Security Infra Engineer will be part of the ESD Divisional IT Infrastructure and Security team, based in Chennai, India. The role will act as a senior technical specialist for network security and infrastructure operations, with a strong focus on firewalls, switches, wireless platforms, vulnerability remediation, incident response and compliance with ASSA ABLOY Group IT standards.

The successful candidate will have 10+ years of relevant IT infrastructure and security experience, including strong hands-on knowledge of enterprise network technologies such as Cisco switching and wireless, Palo Alto and Fortinet firewalls. The role requires a self-driven, proactive and fast-learning individual who can work independently, support global teams, and take ownership of operational issues, project deliverables and security improvements. The candidate will closely with IT Transformation Manager and other team members across the division.

Key Responsibilities

The role will provide senior-level operational support and technical ownership across network security platforms, enterprise network infrastructure and security improvement activities. Key responsibilities include:

• Manage, support and troubleshoot enterprise firewalls, switches and wireless infrastructure, including configuration, lifecycle support, patching and compliance with group standards.
• Support network security operations, including firewall policy management, vulnerability remediation, infrastructure hardening and secure network connectivity.
• Investigate and support security incidents affecting network infrastructure, working closely with Group IT, SOC teams and local IT teams.
• Provide 2nd and 3rd line troubleshooting for infrastructure and network security issues, including root-cause analysis and follow-up remediation.
• Support projects, MA integrations, audits and security improvement initiatives across divisional and global environments.
• Provide clear guidance, escalation support and technical direction to local IT teams and business stakeholders.

Second/Third line support for (divisional) IT infra solutions

Security Incident Management

• Drive routine follow-up actions for security-related improvements, with a primary focus on network devices and infrastructure security.
• Support local IT teams in deploying, maintaining and troubleshooting network hardware, including switches, firewalls and wireless infrastructure.
• Support local IT teams with routine patching, lifecycle maintenance and remediation activities for network hardware.
• Support local IT teams to ensure network hardware is managed according to group standards.
• Engage with group IT SOC for any critical incidents that may arise around the networking area.
• Act as a key contributor in MA projects, supporting remote deployment and integration of network infrastructure across Enterprise IT, OT and Product IT areas.

Projects Audits

Take part in, and actively contribute to, projects related to security, network infrastructure and IT operations, both within the Division and across ASSA ABLOY Group.

Support audits and security assessments within the existing organisation and during integration of newly acquired companies.

Contribution responsibilities / working areas

• IT Security Operations support
  • Help drive activities to establish maintain the IT SecOps function.
  • Focus areas such as vulnerability scanning, and actions related to this.

• Microsoft infrastructure and security support
  • Familiarity with Microsoft infrastructure and security platforms, including Active Directory, Microsoft 365, endpoint management and collaboration platforms, is desirable.
  • Provide support where required, while maintaining the primary focus on network security and infrastructure operations.
  • Familiar with industry standard tools such as rapid7, Bigfix, CyberInt and also BitSight.

• Network Infrastructure support
  • (W)LAN setups
  • Cloud integrations
  • Firewalls, switches and wireless infrastructure

Responsibilities and authorities

• Take ownership of assigned tasks and project work, acting in a self-driven and accountable manner.
• Keep the line manager informed of progress, risks and actions taken to secure the environment and deliver assigned infrastructure responsibilities.
• Represent ESD for some HQ (ASSA ABLOY Group) needs / projects.
• Work based on global IT policies.

Key competences

• Strong experience and knowledge of Cisco switching and wireless technologies, as well as Palo Alto and Fortinet firewall platforms.
• Documented knowledge and experience in IT security, with emphasis on security incident management across an enterprise IT infrastructure landscape.
• Experience with Microsoft infrastructure and security, ethical hacking, infrastructure hardening and CIS controls is desirable.
• Experience with platforms outside the Microsoft technology stack is desirable.
• Relevant certifications such as CISSP, CEH, CCNP Security, PCNSE or Fortinet NSE are desirable, as are certifications in data forensics, perimeter security and Microsoft infrastructure/security.
• Experience analysing and troubleshooting 2nd and 3rd line infrastructure issues.
• Good knowledge of security concepts, controls and operational practices.
• Knowledge of Windows 11 and Windows Server 2016/2019 or later versions.
• Knowledge of VoIP and cloud telephony is desirable.
• Experience with scripting, such as PowerShell or Python, and automation is desirable.
• Strong English communication skills, both written and verbal.

Must-have requirements

• 10+ years of IT infrastructure, network or security experience.
• 5+ years of hands-on enterprise network security operations experience.
• Strong Cisco switching and wireless experience.
• Strong Palo Alto and/or Fortinet firewall experience.
• Experience with security incident management, vulnerability remediation and infrastructure hardening.
• Ability to work independently with global stakeholders and drive issues to closure.

Desirable requirements

• CISSP, CEH, CCNP Security, PCNSE or Fortinet NSE certification.
• Microsoft infrastructure and security experience.
• PowerShell or Python scripting and automation experience.
• Experience with MA integrations, divestments, site migrations or infrastructure projects.
• OT or manufacturing network exposure.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.