Position Description:Company Profile: Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results.

CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com.

Job Title: Lead Systems Engineer - Network Security

Position: Network Security (Delivery & Execution)

Experience: 8 Years

Category: IT Infrastructure

Main location: Bangalore

Position ID: J0826-0463

Employment Type: Full Time

Teams interfaced: Architecture, Business Units, Security, PMO, Service Desk, Vendors

Role Summary We are seeking a Lead Network Engineer with strong hands on expertise in data center networking and security technologies to deliver and operate critical infrastructure. This role follows the "You deploy, you run" model-meaning you will implement solutions and also support them in production.

Responsibilities include preparing Low Level Designs (LLDs) from High Level Designs (HLDs), executing deployments, managing incidents, and ensuring operational stability. You will also work closely with business and technical teams to communicate progress, risks, and outcomes throughout the project lifecycle and BAU operations.

Key Responsibilities:



Project Lifecycle & Delivery

- Participate in project initiation by reviewing HLDs and understanding scope, timelines, and dependencies.
- Prepare LLDs, configuration templates, and implementation plans based on approved HLDs.
- Execute build, configuration, and deployment activities for network and security components.
- Conduct testing and validation (UAT, failover, performance) before production cutover.
- Support go live activities, including risk mitigation and rollback planning.
- Track and report project progress, risks, and issues to stakeholders and PMO.

Operations & Service Delivery

- Own the deployed solutions in production-monitor, maintain, and optimize performance.
- Act as L3 escalation point for critical incidents and complex changes.
- Drive root cause analysis and implement permanent fixes.
- Maintain accurate change records and adhere to ITIL processes.
- Ensure compliance with security and audit requirements.

Stakeholder Communication

- Provide explicit updates on incident status, project progress, and risks to business and technical teams.
- Collaborate with architecture, security, and application teams to align on requirements and timelines.

Operational Excellence

- Maintain network diagrams, LLDs, and configuration repositories.




- Support audits and compliance requirements for security and infrastructure.
- Identify opportunities for automation and process improvement.

Core Technology Scope

- Networking: BGP, OSPF, EVPN/VXLAN, MPLS, QoS
- Data Center Platforms: Cisco Nexus / ACI
- Security:
- Firewalls: Palo Alto, Check Point (policy, NAT, VPN)
- VPN (F5), NAC (Cisco ISE/ClearPass)
- SD WAN: Managed service as part of SASE model (candidate will interface, not configure end to end)
- Secure Web Gateway: Zscaler (basic awareness; not primary responsibility)
- Load Balancing: F5 BIG IP, Citrix Netscaler

- Automation: Ansible, Python, Git (preferred)
- Tooling: ThousandEyes, NetFlow tools

ProfileQualifications

- 10 years in network engineering with strong hands on experience in data center networking and security.
- Proven ability to prepare LLDs and execute deployments based on HLDs.
- Expertise in troubleshooting and resolving complex network/security issues.
- Familiarity with SD WAN and SASE concepts (managed service coordination).
- Strong understanding of ITIL processes and change governance.
- Excellent communication and stakeholder management skills.

Preferred Certifications

- CCNP/CCIE
- Palo Alto PCNSE, Check Point CCSA/CCSE
- F5 CTS, VMware VCP NV
- Automation skills (Ansible, Python)

Success Metrics

- On time delivery of projects and changes
- Reduction in incident MTTR
- Compliance with security and audit standards
- Positive stakeholder feedback

Locations

- Lead Systems Engineer - Network Security
- Category: Infrastructure/Cloud
- Main location: India, Karnataka, Bangalore
- Position ID: J0826-0463
- Employment Type: Full Time

📌 Lead Systems Engineer - Network Security (India)
🏢 Cgi Group
📍 India