We are seeking an experienced and dedicated Infrastructure Engineer specializing in Security, Certificates, and Networks . In this role, you will be responsible for safeguarding our enterprise network infrastructure, managing the lifecycle of digital certificates (PKI), and ensuring secure, high-performance data communication across our hybrid cloud and on-premises environments.

The ideal candidate possesses a deep understanding of network security protocols, hands-on experience automated certificate deployment, and a proven track record of maintaining secure network boundaries.

Key Responsibilities Public Key Infrastructure (PKI) & Certificate Management

- Lifecycle Management: Oversee the end-to-end lifecycle (generation, installation, renewal, and revocation) of SSL/TLS and SSH certificates across servers, load balancers, and applications.
- Automation: Implement and manage automated certificate renewal pipelines using protocols like ACME and tools such as Venafi, Certbot, or HashiCorp Vault.
- Compliance: Ensure all internal and external-facing systems comply with corporate encryption and certificate authority (CA) standards (e.g., DigiCert, Let's Encrypt, Microsoft ADCS).

Network Security & Administration

- Perimeter Security: Deploy, configure, and maintain enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point), Intrusion Detection/Prevention Systems (IDS/IPS), and Web Application Firewalls (WAF).
- Network Connectivity: Manage secure site-to-site VPNs, remote access VPNs, and software-defined networks (SDN) across hybrid environments.
- Access Control: Implement and enforce Network Access Control (NAC) policies,



segmenting networks to minimize security risks and control user and device access.

Monitoring & Incident Response

- Traffic Analysis: Monitor network traffic, logs, and alerts via SIEM tools to detect and investigate potential security breaches or anomalous activity.
- Vulnerability Remediation: Identify network-level vulnerabilities, coordinate patch management schedules for network appliances, and upgrade firmware to neutralize threats.
- Disaster Recovery: Maintain and regularly test network recovery configurations to guarantee business continuity during outages or security incidents.

Required Skills & Qualifications

- Experience: 5+ years of dedicated skilled experience in network engineering, infrastructure security, or cyber security operations.
- Certificate Expertise: Thorough understanding of cryptographic protocols, PKI architecture, symmetric/asymmetric encryption, and managing SSL/TLS certificates.
- Core Networking: Deep knowledge of TCP/IP, routing protocols (BGP, OSPF), DNS architecture, and load balancing technologies (e.g., F5 BIG-IP, Citrix ADC).
- Security Hardware: Hands-on experience configuring and troubleshooting next-generation enterprise firewalls and cloud network security groups (AWS NSGs / Azure Firewalls).
- Identity Management: Experience with secure protocols like OAuth2, SAML, RADIUS, and TACACS+.

Preferred/Nice-to-Have Skills

- Proficiency with Infrastructure as Code (IaC) tools like Terraform or Ansible for automating network and security configurations.
- Scripting capability (Python, Bash, or PowerShell) to automate certificate renewals and health checks.
- Relevant industry certifications such as CISSP, CCNP Security, CompTIA Security+, or cloud provider security specialties (AWS/Azure).

📌 Security, Certificates, and Network Resource (Hyderabad)
🏢 algoleap
📍 Hyderabad