Job Description: Network / Infrastructure Security Specialist

Experience: 1015 Years
Employment Type: Full-Time

Job Summary

We are looking for a Network / Infrastructure Security Specialist with 10–15 years of experience in enterprise network infrastructure, network security, and hybrid cloud environments (AWS & Azure). The ideal candidate should possess robust expertise in routing, switching, firewall technologies, cloud networking, and Infrastructure as Code (IaC), along with Python-based automation to streamline infrastructure operations and security.

This role will be responsible for designing, implementing, securing, automating, and supporting enterprise network infrastructure across on-premises and cloud environments while ensuring high availability, scalability, and compliance with security best practices.

Key Responsibilities

- Design, implement, and support enterprise network infrastructure across on-premises, AWS, and Azure environments.
- Configure and troubleshoot Layer 2/Layer 3 networks, routing, switching, VPNs, VPC, NSGs, WAF, Proxy and enterprise firewalls.
- Implement secure network architectures following Zero Trust principles, including segmentation, access control, and security hardening.
- Deploy and manage cloud networking services in AWS and Azure, ensuring secure hybrid connectivity.
- Develop Infrastructure as Code (IaC) solutions using Terraform, Ansible, CloudFormation, or Azure Bicep for automated infrastructure provisioning.
- Build Python automation scripts for network provisioning, configuration management, compliance validation, reporting,



and operational tasks.
- Integrate automation into CI/CD pipelines to support infrastructure deployment and configuration management.
- Perform infrastructure hardening, vulnerability remediation, firewall policy reviews, and security assessments.
- Monitor network health, availability, and security events while supporting incident response and root cause analysis.
- Create and maintain technical documentation, network diagrams, standards, and operational procedures.
- Collaborate with infrastructure, cloud, DevOps, and cybersecurity teams to deliver secure and scalable solutions.

Technical Skills

Category

Technical Skills / Technologies

Enterprise Networking

TCP/IP, LAN/WAN, VLAN, STP/RSTP/MSTP, MPLS, SD-WAN, QoS, DNS, DHCP

Routing & Switching

OSPF, BGP, EIGRP, Static Routing, VRF, Route Redistribution, HSRP, VRRP, LACP, EtherChannel, ACLs, NAT/PAT

Network Security

Palo Alto, Fortinet, Cisco Firepower/ASA, Check Point, Juniper SRX, IDS/IPS, VPN (IPSec/SSL), NAC, Zero Trust, Network Segmentation

AWS Cloud

VPC, Transit Gateway, Direct Connect, VPN, Route Tables, Security Groups, NACLs, WAF, Shield, IAM, GuardDuty, Security Hub, CloudTrail, AWS Config

Microsoft Azure

VNet,



NSG, Azure Firewall, Application Gateway, ExpressRoute, VPN Gateway, Private Link, Defender for Cloud, Microsoft Sentinel, Entra ID, Azure Policy

Infrastructure as Code (IaC)

Terraform, Ansible, AWS CloudFormation, Azure Bicep, ARM Templates

Automation & Scripting

Python, PowerShell, Bash, REST APIs, JSON, YAML, Jinja2, Git

DevOps / CI-CD

Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins

Monitoring & Logging

SolarWinds, PRTG, Wireshark, Splunk, ELK Stack, Microsoft Sentinel, Grafana, Prometheus

Vulnerability Management

Qualys, Nessus, Tenable, Rapid7 InsightVM

Operating Systems

Windows Server, Linux (RHEL, Ubuntu), VMware ESXi

Security & Compliance

ISO 27001, NIST CSF, CIS Benchmarks, SOC 2, PCI DSS, Zero Trust Architecture

Preferred Qualifications

- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
- Experience working in enterprise or large-scale hybrid cloud environments.
- Knowledge of DevSecOps, CI/CD pipelines, and Infrastructure as Code practices.
- Familiarity with security frameworks such as ISO 27001, NIST CSF, CIS Benchmarks, and SOC 2.

Preferred Certifications

Cisco CCNP Enterprise / CCIE (Preferred), Palo Alto PCNSE or Fortinet NSE, Palo Alto PCNSE or Fortinet NSE, AWS Certified Security – Specialty or Solutions Architect, Microsoft Certified: Azure Network Engineer (AZ-700) or Azure Security Engineer (AZ-500), HashiCorp Terraform Associate, CISSP, CCSP, or CompTIA Security+

📌 Network / Infrastructure Security Specialist (Telangana)
🏢 Hitachi Digital Services
📍 Telangana