Job Purpose

1. JOB PURPOSE We are seeking a skilled Network Security Manager (GB05) with strong hands-on expertise in Oracle Cloud Infrastructure (OCI) networking and security, including Palo Alto SASE, OCI-native security controls (NSGs, Security Lists), and automation-driven rule governance. The role is responsible for end-to-end network security operations, policy automation, and compliance within OCI environments, ensuring secure, scalable, and audit-ready cloud infrastructure. The candidate will also play a key role in managing security audits, compliance requirements, and ongoing security posture enhancements.

Duties and Responsibilities

PRINCIPAL ACCOUNTABILITIES

A. Minimum Required Accountabilities for this Role (Mandatory)

OCI Network Security Operations

- Manage and operate OCI networking components: oVCNs, Subnets, Route Tables oNSGs (Network Security Groups), Security Lists oInternet Gateway, NAT Gateway, Service Gateway oDRG (Dynamic Routing Gateway), Local Remote Peering

- Ensure secure and optimized traffic flow between OCI workloads, on prem systems, and external networks.
- Firewall SASE Security Management
- Manage and operate Palo Alto (VM-Series / SASE) within OCI and hybrid environments.
- Configure and maintain: oSecurity policies and rule bases oNAT (SNAT/DNAT)

oVPNs (IPSec/SSL)

oThreat prevention profiles (IPS, Anti-malware, URL filtering)

- Ensure consistent enforcement of security policies across OCI workloads.
- Security Policy Governance Automation
- Implement and manage firewall rule lifecycle processes: oRule creation, review, optimization, and decommissioning

- Drive automation of rule reviews, recertification, and policy validation using scripts/API-based solutions.
- Maintain standardization across NSGs, Security Lists, and firewall rules.
- Ingress/Egress Traffic Security
- Define and enforce secure ingress and egress controls for OCI applications.
- Implement segmentation strategies for east-west and north-south traffic flows.

- Ensure secure exposure of applications via load balancers, gateways, and SASE.
- Monitoring Incident Management
- Monitor firewall logs,



OCI flow logs, and threat alerts.
- Handle 247 incident response, troubleshooting, and escalation.

- Perform root cause analysis (RCA) and implement proactive security improvements.
- Audit Compliance Management
- Manage network security audits (internal/external/regulatory) specific to OCI environments.

- Ensure compliance with organization policies and regulatory frameworks.
- Conduct:

oFirewall rule reviews and recertification oNSG/security configuration audits oAccess and segmentation validation

- Track and close audit observations with proper documentation.
- Documentation Collaboration
- Maintain updated HLD, LLD, SOPs, runbooks, and security policies.
- Collaborate with cloud, DevOps, security, and application teams.

________________________________________ B. Additional Accountabilities (Advanced / Growth-Oriented)

Security Architecture Optimization

- Design and optimize secure OCI network architectures with segmentation and zero-trust principles.
- Define best practices for VCN design, peering, DRG-based architectures, and load balancing.

Automation DevSecOps
- Implement Infrastructure as Code (IaC) using Terraform/OCI Resource Manager.
- Automate firewall rules, NSG updates, compliance checks, and configuration drift detection.
- Integrate network security into CI/CD pipelines.

Security Posture Enhancement
- Strengthen environment security using: oThreat intelligence oDDoS protection strategies|oContinuous monitoring and anomaly detection

- Integrate with SIEM/SOC tools for centralized visibility.

Leadership Governance
- Act as technical escalation point for OCI security issues.
- Guide team members and vendors on best practices.





- Define governance models for OCI network security operations.

________________________________________

Key Decisions / Dimensions

1. DECISIONS

- Approve firewall rule changes, NSG policies, and security configurations.
- Decide segmentation strategies and ingress/egress controls.
- Lead decisions during security incidents and audit escalations.

- Recommend improvements in security architecture and tooling.

DIMENSIONS

Financial Dimensions

- Management of OCI networking/security costs and Palo Alto licensing

Other Dimensions
- Total Team Size: ___
- Direct Reports: ___
- Indirect Reports: ___
- OCI Environments/VCNs Managed: ___
- Applications Hosted on OCI: ___

Major Challenges
- Maintaining consistent security posture across dynamic OCI environments.
- Managing complex firewall and NSG rule sets without over-permissive access.
- Ensuring continuous compliance with audit and regulatory expectations.

- Handling high-volume security alerts and incident response.
- Balancing agility and speed of deployment with strict security controls.

Required Qualifications and Experience

SKILLS AND KNOWLEDGE a) Educational Qualifications

- Bachelors / Masters in Computer Science, IT, or related field.

b) Work Experience Certifications

Must Have

- 58+ years in network security with cloud exposure, particularly OCI.
- Hands-on experience with: oOCI Networking (VCN, DRG, NSG, Peering)

oPalo Alto Firewalls / SASE

- Strong knowledge of firewall policy management, NAT, VPNs, and segmentation.
- Experience in automating firewall rule review and compliance processes.
- Proven experience in handling security audits and compliance requirements.

Good to Have
- Certifications: OCI Architect/Professional, PCNSE, CCNP Security.
- Experience with Terraform, Python, Ansible for automation.
- Exposure to SIEM/SOC integrations and cloud security monitoring.

Soft Skills
- Strong ownership, audit handling capability, and stakeholder management.
- Excellent troubleshooting and analytical skills.
- Ability to work in a 247 operational workplace.

📌 Delivery Manager Enterprise Network (Pune)
🏢 Bajaj Finance
📍 Pune