Network Security Engineer

Our Pune site is seeking a Network Security Engineer is a hands-on execution role responsible for implementing, operating, and continuously improving network security controls across enterprise, cloud, and manufacturing (IT/OT) environments. Reporting to the Global Network Security Architect, this role focuses on translating architectural standards and patterns into consistent, reliable, and auditable implementations.

This position is heavily execution-oriented, with a primary emphasis on firewall rule analysis and lifecycle management, operationalizing segmentation strategies, and defining and enforcing standardized network security patterns for IT, OT, and hybrid environments. The role partners closely with Network Engineering, OT Engineering, SOC, and Site IT teams to reduce risk while maintaining availability and operational continuity.

What You’ll Do:

Firewall Rule Analysis &

• Execution

- Perform detailed firewall rule analysis across enterprise, OT, and cloud firewalls to identify overly permissive, unused, redundant, or non-compliant rules.
- Implement and maintain firewall rule standards aligned to Zero Trust and least-privilege principles.
- Execute firewall policy changes, including rule creation, modification, consolidation, and clean-up, in accordance with approved architectures and change management processes.
- Validate effectiveness through traffic analysis, logging, and post-implementation review.
- Maintain accurate rule documentation, justification, and traceability to business and security requirements.

Network Security Engineering (IT / OT)

- Implement network segmentation controls for IT, OT, and hybrid environments based on defined zone-and-conduit models.
- Configure and manage security controls supporting IT/OT segmentation, including industrial firewalls, jump hosts, vendor remote access paths, and DMZ services.
- Support secure access patterns for third parties, vendors, and system integrators, ensuring time-bound and policy-compliant connectivity.
- Execute approved patterns for industrial protocol filtering and access control in coordination with OT and plant engineering teams.

Standards, Patterns &

• Continuous Improvement

- Define, document, and maintain actionable network security engineering standards, including:
- Firewall rule design patterns
- Segmentation and zoning implementation guidance
- Secure remote access patterns
- Encryption and certificate usage at the network layer
- Translate architectural reference designs into build-ready configurations and operational runbooks.
- Contribute to the development of reusable security patterns and templates that can be deployed consistently across regions and sites.

Automation &

• Infrastructure as Code

- Implement firewall and network security changes using approved automation and Infrastructure-as-Code (IaC) frameworks where applicable.




- Help standardize configuration baselines and reusable templates for firewalls and network security devices.
- Validate configurations against defined standards and assist with continuous compliance reporting.

Collaboration &

• Governance

- Work under the direction of the Global Network Security Architect to execute approved architectures, standards, and roadmaps.
- Participate in design walkthroughs and security reviews to provide execution and operational feedback.
- Collaborate with Risk, Compliance, and Audit teams by providing evidence of control implementation and operation.
- Support development of documentation needed for internal audits, regulatory reviews, and compliance frameworks.

Operations, Monitoring & Support

- Support network security operations by ensuring firewall, VPN/ZTNA, and segmentation controls are properly logged and integrated with SIEM/SOC workflows.

- Assist in triage and investigation of network-related security incidents, including rule misconfiguration, unauthorized access attempts, and lateral movement.
- Participate in periodic access reviews, rule recertification exercises, and control effectiveness assessments.
- Partner with Network Engineering and Site IT to troubleshoot performance or availability issues related to security controls.

Tools & Technologies

- Firewalls & Security Gateways: Palo Alto, Check Point, Cisco, and OT-focused firewalls
- Network & Segmentation: VLANs, VRFs, routing controls, SD-WAN segmentation constructs
- Remote Access & Identity: VPN, ZTNA, MFA, PAM integrations
- Monitoring & Telemetry: Firewall logs, NetFlow/IPFIX, SIEM/SOAR integrations
- OT Security: Zone-and-conduit models, industrial protocols, secured remote engineering access

What We Seek:

- Bachelor’s degree in Information Technology, Computer Science, Engineering, or equivalent practical experience.
- 5+ years of hands-on experience in network and/or network security engineering roles.
- Strong hands-on experience managing firewall policies and conducting firewall rule analysis in enterprise environments.
- Practical experience implementing segmentation and access controls across IT and manufacturing/OT networks.
- Working knowledge of network security fundamentals: TCP/IP, routing, VLANs, DNS/DHCP, VPNs, and encryption.
- Experience operating within change-controlled, high-availability environments.
- Ability to produce clear documentation and operational artifacts suitable for audit and compliance review..

Core Competencies




- Execution Excellence: Precise, disciplined implementation of security controls.
- Operational Rigor: Focus on reliability, repeatability, and auditability.
- Risk Awareness: Practical application of least privilege and defense-in-depth.
- Collaboration: Effective partnering across IT, OT, security, and plant teams.
- Attention to Detail: Strong analytical skills for rule analysis, traffic review, and configuration

Outstanding Candidates Will Have:
- Experience with Zero Trust programs, SASE platforms, network automation (IaC), container/mesh networking, and industrial networking.
- Demonstrated knowledge of NIST CSF, IEC 62443 principles, specifically with network segmentation and access control.
- Experience supporting manufacturing or industrial environments (OT / ICS).
- Experience with network security automation or Infrastructure-as-Code.
- Relevant certifications (e.g., CISSP, CCIE, CCNP Security, GICSP, or similar).

Reporting & Collaboration
- Reports to: Global Network Security Architect
- Partners with: Network Engineering, Plant/OT Engineering, Cloud Platform, Identity, Risk & Compliance, SOC/IR, and Regional IT Leaders.

Travel
- ~10–15% global travel to plants and regional hubs (as needed for design workshops, site assessments, and cutover support).

What We Offer:

At Entegris, we invest in providing chance to our employees and promote from within. The new hire in this role will have the potential to grow and create relationships across the organization and be recognized for demonstrated success and adherence to company PACE values.

Our total rewards package goes above and beyond just a paycheck. Whether you’re looking to build your career, improve your health, or protect your wealth, we offer generous benefits to help you achieve your goals.

- Excellent health, dental and vision insurance packages to fit your needs
- Flexible work schedule
- Paid time off (PTO) policy that empowers you to take the time you need to recharge
- Education assistance to support your learning journey
- Values-driven culture with colleagues that rally around People, Accountability, Creativity and Excellence.

At Entegris we are committed to providing equal opportunity to all employees and applicants. Our policy is to recruit, hire, train, and reward employees for their individual abilities, achievements and experience without regard to race, color, religion, sexual orientation, age, national origin, disability, marital or military status. Entegris strongly encourages all of its employees to be vaccinated against COVID-19. At Entegris, COVID-19 vaccination is preferred but not required at this time.

GoAsia Talent is proud to partner with Entegris in building their growing team in Pune, India. We invite you to explore all the available opportunities at Entegris and take the next step in your career.

📌 Network Security Engineer (Pune)
🏢 GoAsia Talent
📍 Pune