Network Security Engineer — PQC Deployments

Experience: 4+ years (no upper cap — band set by capability, not years)

Location: Hyderabad, with onsite client deployments across India

About the Role

This is the person who takes our product from architecture diagram to running inside a client's locked-down network. Half the job is design and integration input alongside product and engineering; the other half is being onsite in a segmented, regulated, no-internet-egress workplace, getting the deployment through firewalls, change control, and a client security team that hasn't approved anything yet. You'll be the first hire doing this, so there's no existing runbook — you'll write it as you go. Deep PQC research background isn't required, but you must have genuinely touched cryptographic work (certificate discovery, key/crypto inventory, migration) and be able to hold a credible conversation about why enterprises struggle to move to post-quantum crypto.

What You Will Do

1. Design, configure, and deploy our security products inside client environments — on-prem, hybrid, and restricted networks.
2. Give product and engineering teams real-world input on architecture, integration, and deployment feasibility.
3. Work through segmented and access-restricted networks — firewalled zones, VLANs, regulated environments — to deploy and validate.
4. Run network security assessments and troubleshoot integration failures against live client infrastructure.
5. Drive access requests, approvals,



and change-control sign-offs directly with client IT and security teams.
6. Produce deployment documentation and technical findings for internal teams and client stakeholders.
7. Build and improve the deployment playbook that doesn't exist yet.

What We're Looking For

1. Must have 4+ years in network security engineering — hands-on with routing/switching, firewalls, VPNs, segmentation, and enterprise network architecture.
2. Must have hands-on TLS/SSL, PKI, and certificate/key management experience.
3. Must have actually worked on cryptographic material — certificate discovery, crypto/key inventory, or a migration effort. Not theoretical.
4. Must be conversant with PQC concepts and the real obstacles to enterprise adoption (depth of research not required).
5. Must hold CEH — hard filter, at the time of application. OSCP/GPEN in addition is a plus.
6. Must have deployed independently onsite in restricted, regulated, or high-security environments — finance, government, defense, critical infrastructure.
7. Must be able to troubleshoot under constrained conditions: proxy-only access, no internet egress, strict firewall rules, limited privileges.
8. Must be able to run the client conversation — pushing for access and approvals with engineers and non-technical stakeholders alike.
9. Must be an Indian citizen (client site requirement).
10. Must be comfortable operating without a team or process ahead of them.
11. Preferred: CCNP Security, Security+/CASP+, CCSP; scripting in Python, Bash, or PowerShell for field work.

📌 Network Security Engineer (Hyderabad)
🏢 Careerfit.ai
📍 Hyderabad