We are seeking an experienced and dedicated Infrastructure
Engineer specializing in Security, Certificates, and Networks. In this
role, you will be responsible for safeguarding our enterprise network
infrastructure, managing the lifecycle of digital certificates (PKI), and
ensuring secure, high-performance data communication across our hybrid cloud
and on-premises environments.

The ideal candidate possesses a deep understanding of
network security protocols, hands-on experience automated certificate
deployment, and a proven track record of maintaining secure network boundaries.

Key Responsibilities

Public Key Infrastructure (PKI) & Certificate
Management

- Lifecycle
Management: Oversee the end-to-end lifecycle (generation,
installation, renewal, and revocation) of SSL/TLS and SSH certificates
across servers, load balancers, and applications.

- Automation: Implement and manage automated certificate renewal pipelines using
protocols like ACME and tools such as Venafi, Certbot, or HashiCorp Vault.

- Compliance: Ensure all internal and external-facing systems comply with corporate
encryption and certificate authority (CA) standards (e.g., DigiCert, Let's
Encrypt, Microsoft ADCS).

Network Security & Administration

- Perimeter
Security: Deploy, configure, and maintain enterprise firewalls (e.g.,
Palo Alto, Fortinet, Check Point), Intrusion Detection/Prevention Systems
(IDS/IPS), and Web Application Firewalls (WAF).

- Network
Connectivity: Manage secure site-to-site VPNs, remote access VPNs, and
software-defined networks (SDN) across hybrid environments.

- Access
Control: Implement and enforce Network Access Control (NAC) policies,
segmenting networks to minimize security risks and control user and device
access.





Monitoring & Incident Response

- Traffic
Analysis: Monitor network traffic, logs, and alerts via SIEM tools to
detect and investigate potential security breaches or anomalous activity.

- Vulnerability
Remediation: Identify network-level vulnerabilities, coordinate patch
management schedules for network appliances, and upgrade firmware to
neutralize threats.

- Disaster
Recovery: Maintain and regularly test network recovery configurations
to guarantee business continuity during outages or security incidents.

Required Skills & Qualifications

- Experience: 5+ years of dedicated qualified experience in network engineering,
infrastructure security, or cyber security operations.

- Certificate
Expertise: Thorough understanding of cryptographic protocols, PKI
architecture, symmetric/asymmetric encryption, and managing SSL/TLS
certificates.

- Core
Networking: Deep knowledge of TCP/IP, routing protocols (BGP, OSPF),
DNS architecture, and load balancing technologies (e.g., F5 BIG-IP, Citrix
ADC).

- Security
Hardware: Hands-on experience configuring and troubleshooting
next-generation enterprise firewalls and cloud network security groups
(AWS NSGs / Azure Firewalls).

- Identity
Management: Experience with secure protocols like OAuth2, SAML,
RADIUS, and TACACS+.

Preferred/Nice-to-Have Skills

- Proficiency
with Infrastructure as Code (IaC) tools like Terraform or Ansible for
automating network and security configurations.

- Scripting
capability (Python, Bash, or PowerShell) to automate certificate renewals
and health checks.

- Relevant
industry certifications such as CISSP, CCNP Security, CompTIA Security+,
or cloud provider security specialties (AWS/Azure).

📌 Security, Certificates, and Network Resource (Hyderabad)
🏢 Leading
📍 Hyderabad