Tech Lead

Responsibilities:

• This position would be responsible for managing Firewall, Proxy, IDS, IPS, VPN, DDoS, WAF, NAC and tasks relating to the setup and overall maintenance of the IT infrastructure security in a shared services environment.
• This position will act as an escalation point for all issues related to Firewall, Proxy, VPN, WAF, and DDoS related issues from different teams and customers.
• Provides technical oversight to the team on infrastructure security-related topics to understand the issue and develop solutions to resolve them.
• Reviewing, tracking, analysing, and reporting tickets, assigning tasks to team members on shift and delivering them as per SLA defined SLA.
• Preparing and analysing weekly and monthly security metrics.
• Adherence to ITIL processes.
• Working knowledge of Incident, change, and problem management.

Requirements:

• Deep expertise in firewalls (Palo Alto, Cisco, Fortinet, Check Point), IDS/IPS, VPNs, and Network Access Control (NAC).
• In-depth knowledge of networking protocols (TCP/IP, DNS, BGP, OSPF) and secure network design principles (e. g., Network Segmentation, Zero Trust).
• Good understanding of Zscaler (ZIA and ZPA) and Microsoft Entra access.
• Good understanding of Cisco ISE and RADIUS servers.
• Good understanding of WAF functions.
• Excellent knowledge of various networking concepts like TCP/IP, VLAN and switching concepts.
• Excellent knowledge of IPsec tunnelling concepts.
• Excellent knowledge of ACLs and policies in firewalls.
• Must have excellent oral and written communication skills, including interpersonal skills, presentation skills and an ability to use a variety of communication tools.
• Ability to work independently and with a team in a fast-paced environment.
• Flexibility to adjust to changing requirements, schedules and priorities.
• Familiarity with IPSEC, GRE, HTTP/HTTPS, and DNS protocols.
• Hands-on experience with network troubleshooting using tools such as Wireshark, tcpdump, Traceroute, and MTR.
• Familiarity with security concepts and configurations in major cloud platforms (AWS, Azure, GCP).

Preferred Qualifications:

• Graduate with relevant experience in cybersecurity support in technology areas like Firewall, Proxy, VPN, DDoS, WAF, Cloud Security.
• Hands-on product administration/management/L2/L3 level troubleshooting/reporting - Cisco, PaloAlto, FortiGate.
• Desired Process Certifications: ITIL V4 foundation.
• Preferred Technology Certifications: Security +, Network Fundamentals.
• Ready to work in 24x7 rotational shifts.