Company Description Kerala Vision Broadband Limited (KVBL) is a leading Internet Service Provider in India, promoted by the Cable Operator’s Association, a consortium of around 5000 cable operators in Kerala. The company focuses on delivering high-speed internet and internet-enabled services to households and institutions at affordable rates using state-of-the-art technology. KVBL operates the largest FTTH network in South India, offering extensive digital and broadband services.

Its network reaches both urban and rural areas, supported by a strong grassroots presence of dedicated cable operators.

Kerala

Vision is recognized as one of the most effective and reliable multi-service providers in the country.

Role Description The Security Architect is a cross-domain cybersecurity authority responsible for designing and positioning end-to-end security architectures spanning Network Security, End User Computing (EUC) Security, and Data Centre Security. The role serves both ISP clients (managing telco-grade security infrastructure) and MSI customers (enterprise security transformation). A strong commercial mindset and pre-sales ability are essential to position security as a value driver rather than a cost centre.

Key Responsibilities • Architect holistic security solutions covering perimeter, internal segmentation, endpoint, cloud, and identity layers

- Design network security solutions: NGFW, IPS/IDS, SD-WAN security overlays, DDoS protection, and carrier-grade NAT/CGN security
- Architect End User Computing security — endpoint protection platforms (EPP), EDR/XDR, VDI security, email security, and web proxy/filtering
- Design Data Centre security: micro-segmentation, East-West firewall controls, WAF, privileged access management (PAM), and Zero Trust Architecture (ZTA)
- Position and architect SASE (Secure Access Service Edge) and SSE solutions — Zscaler, Prisma Access, Cato Networks




- Develop SOC design frameworks, SIEM architecture (Splunk, Microsoft Sentinel, IBM QRadar), and SOAR playbooks
- Lead security assessments, gap analyses, and compliance mapping (ISO 27001, NIST, PCI-DSS, GDPR, NCA ECC in KSA/UAE)
- Respond to security-focused RFPs, build BoMs, and lead technical presentations to CISO-level stakeholders
- Maintain strong OEM relationships with Palo Alto Networks, Fortinet, Check Point, Cisco, CrowdStrike, Microsoft, Zscaler, and Milestone PSIM/VMS
- Provide guidance on ICCC (Integrated Command & Control Centre) security integration — PSIM, video surveillance, access control ◆ Technical Expertise — Hands-On Requirements • Palo Alto Networks: PAN-OS, Panorama, Prisma Access, Prisma Cloud — hands-on deployment and policy management
- Fortinet: FortiGate, FortiManager, FortiAnalyzer, FortiClient EMS — advanced routing security and SD-WAN integration
- Check Point: Smart Console, CPUSE, CloudGuard — policy administration and HA deployment
- Microsoft 365 Defender stack: Defender for Endpoint, Identity, Cloud Apps, and Sentinel SIEM
- Network segmentation: VLANs, ACLs, micro-segmentation with VMware NSX-T or Illumio
- Identity and access management: Active Directory, Azure AD, Okta, CyberArk PAM
- Vulnerability management tools: Tenable Nessus, Qualys, Rapid7 — enterprise scanning and reporting
- ICCC / Physical Security integration: Milestone XProtect, Genetec, Lenel, Honeywell Pro-Watch — understanding of video analytics and access control
- Cloud security posture management (CSPM) on AWS, Azure, and GCP Educational Qualifications • Mandatory: B.E. / B.Tech in Electronics & Communication, Computer Science, Information Technology, or Telecommunications
- Equivalent: BCA / MCA / M.Sc. (IT/Networks) — considered with strong industry experience
- Preferred: Postgraduate qualifications (M.Tech / MBA in Technology Management) are a distinct advantage

📌 Network Security Engineer (Kerala)
🏢 Kerala Vision Broadband
📍 Kerala