Role Summary :We are seeking a highly experienced Network Security Lead to own and drive enterprise network and cyber security strategy, architecture, and operations. The role demands strong expertise in CyberArk PAM, Firewalls, SD-WAN, DLP, SIEM, SOAR, and enterprise monitoring solutions. The ideal candidate will combine deep technical skills with leadership capabilities to manage complex security environments and guide teams toward a mature security posture.Key Responsibilities :1.

Network &

- Security Architecture :
- Lead the design, implementation, and optimization of secure network architecture across on-prem, cloud, and hybrid environments.
- Define and enforce network security standards, segmentation models, and zero-trust principles.
- Ensure resilience, scalability, and availability of security infrastructure.2. Firewall &
- SD-WAN Management :
- Own implementation and operations of Next-Generation Firewalls (NGFW) such as Palo Alto, Fortinet, Cisco, Check Point, etc.
- Design and manage firewall rulesets, NAT, IPS/IDS, VPNs (site-to-site and remote access).
- Lead deployment, migration, and optimization of SD-WAN solutions (Cisco, Fortinet, VMware, Silver Peak, etc.).
- Integrate SD-WAN with security controls including firewalls, cloud security, and monitoring platforms.
- Ensure secure connectivity between data centers, branches, and cloud environments.3.

Privileged Access

Management (CyberArk)

- Own and manage CyberArk PAM solutions including PVWA, CPM, PSM, and EPM.
- Implement privileged access lifecycle management, password vaulting, session monitoring, and compliance reporting.
- Lead CyberArk onboarding, integrations, upgrades,



and operational governance.4. SIEM &
- SOAR :
- Lead SIEM platform operations (ArcSight, Sentinel, etc.) including onboarding of firewall, SD-WAN, and security device logs.
- Define and optimize correlation rules, dashboards, alerts, and compliance reporting.
- Drive SOAR automation for incident response, threat containment, and remediation workflows.5.

Data Loss

Prevention (DLP)

- Design and manage DLP controls for data at rest, in use, and in transit.
- Partner with legal, compliance, and business teams to balance security and usability.6.

Threat

Detection &

- Incident Response :
- Lead network and security incident response including firewall breaches, lateral movement, and data exfiltration attempts.
- Perform threat hunting, root cause analysis, and post-incident improvements.
- Coordinate with SOC teams, vendors, and senior leadership during critical events.7. Monitoring, Governance &
- Compliance :
- Oversee enterprise security monitoring and alerting for network and security platforms.
- Ensure adherence to ISO 27001, NIST, PCI-DSS, SOX, GDPR, and regulatory requirements.
- Support audits, vulnerability assessments, penetration tests, and risk assessments.8. Leadership &
- Stakeholder Engagement :
- Lead, mentor,



and grow a team of network and security engineers.
- Act as a trusted advisor to IT and business leadership on network security risks and roadmap.
- Manage security vendors, service providers, and technology partners.Required Skills &

Qualifications :1.

Technical

Skills

- 8-10 years of experience in Network &
- Cyber Security.
- Strong hands-on experience with Next-Generation Firewalls (NGFW).
- Proven experience in SD-WAN design, deployment, and operations.
- Expert knowledge of CyberArk PAM solutions.
- Strong SIEM experience with log ingestion from network, firewall, and SD-WAN platforms.
- Experience with SOAR, security automation, and orchestration.
- Deep understanding of DLP technologies.
- Solid networking fundamentals (TCP/IP, routing, switching, DHCP, DNS).
- Cloud and cloud-network security experience (AWS/Azure/GCP) is a plus.2. Soft Skills :
- Strong leadership, mentoring, and team-building skills.
- Excellent communication and stakeholder management.
- Analytical mindset with strong problem-solving abilities.
- Ability to lead under pressure during security incidents.3.

Certifications (Preferred)

- CISSP, CISM, CCSP.
- CyberArk PAM Certifications.
- Firewall/Network Certifications (PCNSE, NSE, CCNP Security, etc.).
- Cloud Security Certifications (Azure/AWS).4. Nice to Have :
- SOC transformation or large-scale security modernization experience.
- Zero Trust and Secure Access Service Edge (SASE) exposure.
- Experience with UEBA, CASB, EDR/XDR.
- Automation and scripting (Python, PowerShell). (ref:hirist.tech) .

📌 Aviva India - Network Security Lead - CyberArk PAM (Gurugram)
🏢 Aviva Life Insurance Company India
📍 Gurugram