POSITION PURPOSE :

A brief summary of the purpose this position must fulfill.

The Network Security Engineer is responsible for designing, implementing, configuring, and supporting enterprise network security infrastructure and services to protect organizational business operations and critical assets.

The incumbent will be involved throughout the project lifecycle, from security assessment and planning through implementation, hardening, testing, and transition to operations teams. This includes designing secure architectures, preparing and finalizing security BoQ/SoW documents, defining security standards and policies, coordinating with vendors, and ensuring compliance with enterprise cybersecurity and governance requirements.

ESSENTIAL DUTIES AND RESPONSIBILITIES :

To perform this job successfully, an individual must satisfactorily perform each essential duty.

- Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.
- Provides direct technical support in planning, designing, and implementing enterprise Network Security solutions for global infrastructure environments.
- Independently deploys and configures network security platforms, including Next-Generation Firewalls (NGFW), IDS/IPS, Secure Web Gateway (SWG), VPN solutions, NAC, Proxy, WAF, and Secure Remote Access technologies.
- Develops detailed security architecture diagrams, migration plans, and integration schematics for new implementations, upgrades, and transformation initiatives.
- Provides day-to-day operational and project support for enterprise security platforms, ensuring security compliance, availability, performance, and timely delivery of commitments with high-quality standards.
- Works closely with Network, Voice, Server, Cloud, and Security Operations teams to ensure seamless integration, resilience, and stability across enterprise security ecosystems.
- 5 to 7 years of hands-on experience in designing, configuring, implementing, and supporting enterprise-class Network Security solutions.
- Hands-on working experience with enterprise security platforms such as Palo Alto Networks (PA-Series), Cisco Firepower/FTD, Fortinet FortiGate, Check Point, Zscaler, and Secure Web Gateway technologies.
- Hands-on experience with secure routing and SD-WAN platforms including Cisco Catalyst 8200/8300 Edge Platforms, ISR 4300 series, and ASR 1000 series with integrated security services.
- Hands-on experience with WAN security technologies, Internet edge security, VPN gateways, ADC/load balancers, and secure remote connectivity solutions.
- Working experience with IP Address Management (IPAM), DNS, and DHCP security solutions such as Infoblox.
- Hands-on experience with network and security monitoring/management tools including SolarWinds, Cisco DNAC, SIEM integrations, Syslog,



and centralized log management platforms.
- Strong experience in High Availability and Redundancy technologies including VRRP, HSRP, GLBP, clustering, HA failover, EtherChannel, LACP, and resilient security architectures.
- Excellent understanding of routing and security protocols including BGP, OSPF, EIGRP, IPsec, SSL VPN, TACACS , RADIUS, NetFlow, SNMP, IPSLA, QoS, and Zero Trust concepts.
- Hands-on experience with VPN technologies, GRE tunnels, ACLs, NAT/PAT, Micro-segmentation, Security Policies, and enterprise traffic engineering.
- Hands-on experience with Cisco ISE, NAC solutions, enterprise Wi-Fi security, MFA integration, and identity-based access control technologies.
- Candidate must have a minimum of 3 - 4 years of implementation experience in large-scale enterprise and Data Center security environments, including Hub & Spoke, SD-WAN, and hybrid cloud connectivity models.
- Strong understanding of enterprise security architecture frameworks, transport security protocols, risk management, compliance standards, and ITIL-based change management processes.
- Develops and maintains security system documentation, SOPs, technical diagrams, and operational runbooks.
- Produces secure and scalable system designs aligned with cybersecurity best practices, governance standards, and industry frameworks.
- Provides Tier-3 support and advanced troubleshooting for enterprise network security incidents, vulnerabilities, and critical infrastructure issues.
- Candidate shall be open to working in stretched shifts, odd working hours, maintenance windows, and weekends based on business and operational requirements.

QUALIFICATIONS :

The qualifications listed below are representative of the minimum knowledge, skill, and/or ability required.

KNOWLEDGE :

- Working knowledge of the latest network solutions, equipment and technologies.
- Advanced knowledge in data network foundations and the Open Systems Interconnect Model.
- Experience working in a team-oriented, collaborative environment.
- Possess at least a base understanding of network switching and routing.

SKILLS AND ABILITIES :

- High level of analytical and problem-solving abilities.
- Ability to conduct research into conferencing/collaboration issues and products as required.
- Robust design documentation skills.
- Strong interpersonal and oral communication skills. Highly self-motivated and directed.
- Excellent organization skills




- Ability to work on more than one project at a time with attention to detail and quality.
- Ability to effectively prioritize and execute tasks in a high-pressure environment.
- Must possess time management skills, organizational skills, writing skills, and computer skills including Microsoft Word and Excel.

SUPERVISION : Work is performed without appreciable direction. Exercises considerable latitude in determining technical objectives of assignment. Completed work is reviewed from a relatively long-term perspective, for desired results.

EDUCATION/EXPERIENCE : Minimum of a Bachelor's degree (or equivalent) and Minimum 12 - 15 years of experience. However, a combination of experience and/or education will be taken into consideration.

LICENSES/CERTIFICATIONS : Network certification (CCNA, CCNP, Next Gen Firewall, Network , etc.) is a plus.

LANGUAGE SKILLS:

- Ability to read and interpret complex business and/or technical documents.
- Ability to write comprehensive reports and detailed business correspondence.
- Ability to work with groups of people such as other departments and communicate known concepts.
- Ability to present to a group of departments.

MATHEMATICAL SKILLS :

- Ability to add, subtract, multiply and divide in all units of measure, using whole numbers, common fractions and decimals.
- Ability to compute rate, ratio and percent and to draw and interpret bar graphs.
- Working knowledge of non-standard numbering systems, e.g., base 2 and base 16.

REASONING ABILITY :

- Ability to solve problems with complex variables through non-standardized solutions that require independent judgment and analysis.
- Ability to draw inferences and use deductive reasoning with no prescribed procedures to solve complex problems.

PHYSICAL DEMANDS :

- The physical demands described here are representative of those that must be met by an employee to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential duties.
- Typically sitting at a desk or table. Intermittently sitting, standing, walking or stooping. May be required to bend; kneel; and climb steps. May require use of hands and use of arms. Medium lifting requirements. Periodic travel is required.
- May be required to stand; walk; stoop; bend; kneel; and climb steps. May require use of hands and use of arms. Medium lifting requirements.

WORK ENVIRONMENT :

- The work environment characteristics described here are representative of those an employee encounters while performing the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential duties.
- Typically a normal office environment. Occasional work in telecom closets, audiovisual rooms and server rooms is required.

📌 Viatris - Network Security Engineer (India)
🏢 Viatris
📍 India