Network Security Compliance Engineer

We are seeking a highly skilled Network Security Compliance Check and Remediation Engineer responsible for ensuring that network and security infrastructure complies with internal security standards, regulatory requirements, and industry best practices.

The candidate will perform security compliance assessments, identify gaps, drive remediation activities, and work closely with network, cloud, security, and operations teams to maintain a secure and compliant environment. The role requires strong expertise in network security technologies, firewall management, security hardening, vulnerability management, access governance, change management, and compliance auditing.

The candidate will have responsibilities across the following functions:

Firewall and Security Policy Compliance:

• Conduct periodic firewall rule reviews and security policy audits.
• Identify and remediate:
• Zero-hit firewall rules.
• Redundant or duplicate rules.
• Expired temporary access rules.
• Overly permissive access policies.
• Review and optimise Disaster Recovery (DR) firewall configurations.
• Ensure firewall policies align with security and regulatory standards.

Network Security Compliance Reviews:

• Perform compliance assessments against security baselines and organisational standards.
• Validate network segmentation and access controls.
• Review and maintain network security architecture documentation.

Network Documentation and Inventory Management:

• Create and maintain network diagrams and security architecture documentation.
• Maintain an accurate inventory of firewalls, Routers, Switches, Load Balancers, Security Appliances, and cloud network components.

Access Management and Governance:

• Perform periodic user access reviews.
• Validate privileged account access.
• Ensure least-privilege access principles are followed.
• Coordinate access certification and recertification activities.

Security Hardening:

• Review and implement network device hardening standards.
• Conduct periodic hardening audits for: Firewalls, Routers, Switches, VPN Devices.
• Cloud Network Security Components.
• Track and manage recurring hardening activities.

Change and Incident Management:

• Review and implement network security change requests.
• Participate in CAB (Change Advisory Board) activities.
• Handle emergency changes and ensure proper documentation.
• Perform post-change validation and risk assessment.

Risk Assessment and Remediation:

• Conduct risk assessments for insecure services and ports.
• Identify security gaps and recommend remediation measures.
• Track remediation activities until closure.
• Prepare risk treatment plans and compliance reports.

Patch and Vulnerability Management:

• Ensure network and security devices are maintained at N-1 software versions.
• Coordinate firmware and software upgrades.
• Track and remediate vulnerabilities identified through: Vulnerability Assessments, Security Scans, Penetration Testing

VAPT Management:

• Coordinate Vulnerability Assessment and Penetration Testing (VAPT).
• Analyse findings and prioritise remediation.
• Validate closure of vulnerabilities.
• Prepare management reports and compliance evidence.

DNS Security Review:

• Review DNS architecture and configurations.
• Validate DNS security controls.
• Identify unauthorised or risky DNS configurations.
• Ensure DNS compliance with security standards.

Asset Lifecycle Management:

• Track AMC contracts and warranty status.
• Monitor:
• Hardware End of Life (EOL)
• Software End of Life (EOL)
• End of Support (EOS)
• Drive technology refresh and remediation planning.

Audit and Compliance Support:

• Support internal and external audits.
• Provide compliance evidence and documentation.
• Assist with remediation of audit observations.
• Ensure adherence to standards such as:
• RBI Guidelines
• ISO 27001
• PCI-DSS
• NIST
• CIS Benchmarks
• SOC 2

Requirements:

• Strong understanding of network security architecture and compliance requirements.
• Experience managing enterprise firewalls and cloud network security controls.
• Ability to perform security assessments and drive remediation activities independently.
• Excellent troubleshooting, documentation, and stakeholder management skills.
• Experience supporting regulatory audits and security governance programs.
• Strong analytical mindset with a focus on risk reduction and continuous improvement.

Required Technical Skills:

Networking:

• TCP/IP
• Routing and Switching
• BGP
• OSPF
• VLANs
• NAT
• DNS
• DHCP
• VPN Technologies

Security Technologies:

• Next-Generation Firewalls
• IDS/IPS
• WAF
• DDoS Protection
• Proxy Security
• Network Segmentation

Firewall Platforms:

Experience with one or more:

• Palo Alto Networks Firewalls
• Fortinet FortiGate
• Cisco Firepower/ASA
• Check Point Firewalls

Cloud Security Preferred:

• Amazon Web Services Networking
• Microsoft Azure Networking
• Oracle OCI Networking
• Security Groups
• NSGs
• Route Tables
• Cloud Firewalls

Compliance and Governance:

• Risk Assessment
• Security Audits
• Compliance Reviews
• Vulnerability Management
• Change Management
• Access Governance

Automation Preferred

• Python
• PowerShell
• REST APIs
• Ansible
• Terraform

Preferred Certifications:

• CCNA / CCNP Security
• PCNSA / PCNSE
• NSE 4 / NSE 5
• CISSP
• CISM
• CEH
• ISO 27001 Lead Implementer/Auditor
• OCI/AWS/Azure Networking Certifications

Key Performance Indicators (KPIs):

• Zero-hit rule reduction percentage
• Firewall compliance score
• Vulnerability remediation SLA compliance
• Patch compliance percentage
• Access review completion rate
• Audit observations closure rate
• EOL/EOS remediation compliance
• Security hardening compliance score
• Change success rate
• Risk remediation closure percentage