Network Security Specialist

Job Description

Loc: Gurgaon

Role Overview

The Senior Manager – Network Security & SASE Operations will lead the design, implementation, and operational governance of the organization's network security infrastructure. This role is responsible for firewall architecture, SASE deployments (Zscaler and similar platforms), VPN governance, and secure WAN/LAN strategy across enterprise environments.

The role combines strategic network security architecture with hands-on oversight of operational execution, compliance alignment, and vendor governance.

1. Network Security Architecture & Engineering

• Design and govern enterprise firewall architecture (HA, segmentation, NAT, IPS, VPN).
• Lead implementation and optimization of FortiGate Firewalls across data centers and branches.
• Architect secure connectivity using IPSec/SSL VPN.
• Implement network segmentation (VLANs, DMZ, Zero Trust principles).
• Define network hardening standards and baseline configurations.

1. SASE Strategy & Implementation

• Lead enterprise-wide deployment of Zscaler SASE (ZIA/ZPA) or equivalent SASE platforms.
• Oversee migration from traditional perimeter security to cloud-delivered security.
• Integrate SASE with SD-WAN and branch connectivity.
• Define CASB, SWG, and Zero Trust Network Access policies.
• Optimize secure internet breakout architecture.

1. Operations & Governance

• Own firewall rule lifecycle management (creation, review, cleanup, audit).
• Establish and enforce SOPs for firewall change management.
• Monitor security events from firewalls and SASE platforms.
• Lead incident triage related to network-based threats.
• Ensure 24/7 operational readiness of network security systems.

1. Risk & Compliance Alignment

• Align network security posture with organizational GRC framework.
• Conduct periodic firewall audits and access reviews.
• Manage third-party connectivity and vendor VPN risk.
• Oversee patch management for firewalls and network security appliances.
• Support ISO/NIST/industry audit requirements.

1. Vendor & Stakeholder Management

• Manage OEM relationships (Fortinet, Zscaler, ISP partners).
• Evaluate and onboard new SASE or firewall technologies.
• Coordinate with Cloud, IT Infrastructure, SOC, and Application teams.
• Drive cost optimization in WAN/SASE architecture.

1. Documentation & Reporting

• Maintain HLD/LLD for network security infrastructure.
• Provide executive-level reports on:
• Firewall posture
• VPN usage
• SASE adoption
• Risk exposure metrics
• Conduct monthly security review meetings with leadership.