Company Description Kerala Vision Broadband Limited (KVBL) is a leading Internet Service Provider in India, promoted by the Cable Operator’s Association, a consortium of around 5000 cable operators in Kerala. The company focuses on delivering high-speed internet and internet-enabled services to households and institutions at affordable rates using state-of-the-art technology.

KVBL operates the largest FTTH network in South India, offering extensive digital and broadband services. Its network reaches both urban and rural areas, supported by a robust grassroots presence of dedicated cable operators.

Kerala

Vision is recognized as one of the most efficient and reliable multi-service providers in the country.

Role Description The Security Architect is a cross-domain cybersecurity authority responsible for designing and positioning end-to-end security architectures spanning Network Security, End User Computing (EUC) Security, and Data Centre Security. The role serves both ISP clients (managing telco-grade security infrastructure) and MSI customers (enterprise security transformation). A strong commercial mindset and pre-sales ability are essential to position security as a value driver rather than a cost centre.

Key Responsibilities

•

Architect holistic security solutions covering perimeter, internal segmentation, endpoint, cloud, and identity layers

•

Design network security solutions: NGFW, IPS/IDS, SD-WAN security overlays, DDoS protection, and carrier-grade NAT/CGN security

•

Architect End User Computing security — endpoint protection platforms (EPP), EDR/XDR, VDI security, email security, and web proxy/filtering

•

Design Data Centre security: micro-segmentation, East-West firewall controls, WAF, privileged access management (PAM), and Zero Trust Architecture (ZTA)

•

Position and architect SASE (Secure Access Service Edge) and SSE solutions — Zscaler, Prisma Access, Cato Networks

•





Develop SOC design frameworks, SIEM architecture (Splunk, Microsoft Sentinel, IBM QRadar), and SOAR playbooks

•

Lead security assessments, gap analyses, and compliance mapping (ISO 27001, NIST, PCI-DSS, GDPR, NCA ECC in KSA/UAE)

•

Respond to security-focused RFPs, build BoMs, and lead technical presentations to CISO-level stakeholders

•

Maintain strong OEM relationships with Palo Alto Networks, Fortinet, Check Point, Cisco, CrowdStrike, Microsoft, Zscaler, and Milestone PSIM/VMS

•

Provide guidance on ICCC (Integrated Command & Control Centre) security integration — PSIM, video surveillance, access control

◆ Technical Expertise — Hands-On Requirements

•

Palo Alto Networks: PAN-OS, Panorama, Prisma Access, Prisma Cloud — hands-on deployment and policy management

•

Fortinet: FortiGate, FortiManager, FortiAnalyzer, FortiClient EMS — advanced routing security and SD-WAN integration

•

Check Point: Smart Console, CPUSE, CloudGuard — policy administration and HA deployment

•

Microsoft 365 Defender stack: Defender for Endpoint, Identity, Cloud Apps, and Sentinel SIEM

•

Network segmentation: VLANs, ACLs, micro-segmentation with VMware NSX-T or Illumio

•

Identity and access management: Active Directory, Azure AD, Okta, CyberArk PAM

•

Vulnerability management tools: Tenable Nessus, Qualys, Rapid7 — enterprise scanning and reporting

•

ICCC / Physical Security integration: Milestone XProtect, Genetec, Lenel, Honeywell Pro-Watch — understanding of video analytics and access control

•

Cloud security posture management (CSPM) on AWS, Azure, and GCP

Educational Qualifications

- Mandatory:

B.E. / B.Tech in Electronics & Communication, Computer Science, Information Technology, or Telecommunications
- Equivalent:

BCA / MCA / M.Sc. (IT/Networks) — considered with strong industry experience
- Preferred:

Postgraduate qualifications (M.Tech / MBA in Technology Management) are a distinct advantage

📌 Network Security Engineer (Kerala)
🏢 Kerala Vision Broadband
📍 Kerala