Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Network Security Operations

Good to have skills : NA

Minimum 3 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education Summary: As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to assess security needs, documenting security controls, and overseeing the transition to cloud security-managed operations. You will engage in discussions to refine security strategies and ensure compliance with industry standards, all while adapting to the evolving landscape of cloud security. Roles & Responsibilities:

• Expected to perform independently and become an SME.
• Required active participation/contribution in team discussions.
• Contribute in providing solutions to work related problems.
• Assist in the development and documentation of security policies and procedures.
• Evaluate and recommend security technologies and tools to enhance the security posture.
• Management of the Checkpoint Firewall Network and Cisco ISE
• Lead day to day operations of the Checkpoint Firewall and administration associated with it.
• Good handle on Network concepts as well.
• Will be responsible for the end to end delivery
• Technical Experience.
• In-depth understanding of Checkpoint Firewalls.
• In-depth understanding on IPsec VPNs, Global Protect VPNs, Security Profiles, Firewall implementation.
• Network Firewalls (Checkpoint on-premise and Azure, Cisco ASA on-premise)
• Network Access Control (Cisco ISE)
• Web Application Firewall (Barracuda on-premise & Incapsula)
• Firewall Policy and Rule Management – Firewall rule requests following the standard ITIL change request process.
• Perform monthly ruleset reviews.
• Remote Access Request Coordination – Remote access requests following the standard request process.
• Malware Protection – Provides protection from advanced persistent threats, zero-day and targeted attacks.
• Network Intrusion Prevention – Ability to identify and block threats using signature-based detection of malicious traffic.
• Content Filtering – Web filtering policy/configuration management and Unified Resources Locator ( URL ) re-categorization as per approved policy.
• Threat Analysis – Service based on responding to the output of vendor provided threat analysis to address zero-day exploits and malware.
• Patch Management – Monitoring of firmware patches and testing/deployment of new firmware patches to the in-scope NGFW devices and management console - software.
• Service review and reporting.
• Good handle on Network concepts and tools (BGP, switching, routing etc) as well.
• In-depth understanding of Proxies, IDS/IPS, Network Security Operations.
• Basic Knowledge on Operating Systems Windows, Unix, Linux Professional & Technical Skills:
• Must To Have Skills: Proficiency in Network Security Operations.
• Strong understanding of cloud security principles and best practices.
• Experience with security frameworks such as NIST, ISO 27001, or CIS.
• Familiarity with risk assessment methodologies and security compliance requirements.
• Knowledge of incident response and threat management processes.
• Should be open to work in shifts.
• Good communication skills. Written as well as Oral.
• Understanding on technical and process-based risk assessments
• Knowledge on endpoint security processes and products Additional Information:
• The candidate should have minimum 3 years of experience in Network Security Operations.
• This position is based at our Bengaluru office.
• A 15 years full time education is required.