Track Lead - IT security

Chennai, Tamil Nadu

Job Summary

Network Security

Key Responsibilities

Key Responsibilities • Inventory all in-scope MX67 appliances, sites, serial numbers, licensing, WAN circuits, public IP addresses, VLANs, routes, VPN peers, firewall policies, NAT rules, DHCP settings, traffic-shaping policies, and monitoring integrations. • Review device utilization, throughput, user count, VPN demand, resiliency, security subscriptions, interface needs, and future growth to validate the target appliance model and license tier. • Prepare the high-level and low-level design, migration method, implementation plan, rollback plan, test plan, outage schedule, risk register, and stakeholder communication plan. • Coordinate hardware, license, circuit, cabling, rack or desktop placement, power, access, change approvals, and vendor support prerequisites. • Claim and stage replacement appliances in the Meraki Dashboard; apply current approved firmware and recreate or migrate the validated configuration. • Preserve required Layer 3 and Layer 7 firewall controls, NAT, VLAN and DHCP services, static routes, SD-WAN, AutoVPN, IPsec VPN, client VPN, traffic shaping, content filtering, malware protection, IDS/IPS, syslog, NetFlow, and alerting settings. • Perform configuration peer review and pre-cutover validation, including port mapping, addressing, routing, policy order, VPN parameters, and upstream or downstream dependencies. • Execute the cutover within the approved change window, maintain command-center communication, capture timestamps and evidence, and initiate rollback when agreed thresholds are breached. • Validate WAN connectivity, DNS, DHCP, routing, internet access, business applications, VPN tunnels, failover, security policies, logging, monitoring, and performance after migration. • Monitor the refreshed gateway during the stabilization period, resolve defects,



tune policies where approved, and coordinate vendor escalation when required. • Remove the legacy appliance from production and the management inventory only after acceptance; sanitize, return, recycle, or dispose of it in accordance with asset and security procedures. • Update diagrams, configuration records, asset inventories, support records, operational procedures, and the configuration management database, then complete knowledge transfer and formal handover.

Skill Requirements

• Relevant experience implementing and supporting enterprise or branch firewalls, routers, SD-WAN, and secure network services. • Hands-on expertise with Cisco Meraki MX appliances and the Meraki Dashboard, including appliance provisioning, firmware, licensing, templates, organizations, networks, and troubleshooting tools. • Strong knowledge of TCP/IP, VLANs, DHCP, DNS, NAT, static and dynamic routing concepts, dual-WAN resiliency, IPsec, AutoVPN, remote-access VPN, and high-availability principles. • Working knowledge of next-generation firewall controls, Layer 7 policy, IDS/IPS, malware protection, content filtering, segmentation, logging, and security monitoring. • Experience executing production changes under ITIL-based change, incident, problem, configuration, and asset-management processes. • Ability to produce implementation plans, rollback procedures, test evidence, network diagrams, risk assessments, and operational handover documentation. • Solid troubleshooting, stakeholder coordination, vendor management, and written and verbal communication skills. • Ability to work during planned maintenance windows and provide post-implementation support.

Other Requirements

• Cisco Certified Network Associate, Cisco Certified Network Professional, Cisco Meraki Solutions Specialist, or equivalent networking and security certification. • Experience refreshing network security appliances across multiple branch locations.

📌 Track Lead - IT security (India)
🏢 HCLTech
📍 India