: AWS Senior Network / Security EngineerJob Title: AWS Senior Network / Security Engineer

Experience: 8 -12 Years

Location: PAN India

Employment Type: Full-Time / Contract (as applicable)

Notice Period: Immediate Joiners or up to 30 Days

Maximum Budget: ₹30 LPA

Job OverviewWe are looking for an experienced AWS Senior Network / Security Engineer to design, implement, and validate secure network isolation for an Isolated Recovery Environment (IRE). The role focuses on ensuring recovery traffic remains fully segregated from production and enterprise services while maintaining a secure, controlled, and auditable recovery environment.

The ideal candidate will have strong hands-on experience in AWS networking, cloud security, FortiGate firewalls, Transit Gateway, VPC routing, network segmentation, SIEM integration, and security controls for regulated workloads.

Key Responsibilities1. AWS Network Engineering &

- Isolation

- Design and implement network isolation for the Isolated Recovery Workplace (IRE).
- Configure AWS Transit Gateway (TGW) attachments, route table associations, VPC routing, and network segmentation.
- Configure and manage Route 53 public and private hosted zones.
- Manage FortiGate firewall infrastructure and perimeter access controls.
- Validate perimeter ACLs and ensure recovery traffic is isolated from production and enterprise networks.
- Design secure remote-access solutions into the CR tenant, including break-glass access mechanisms.

2.

Cloud

Security &

• Network Controls
- Implement and validate AWS security groups, Network ACLs (NACLs), egress restrictions, and network security guardrails.
- Maintain the air-gap security posture during recovery operations and after restoration.
- Enforce least-privilege network access and secure communication between workloads.
- Conduct network security reviews and validate isolation controls against established policies.




- Support security control assessments and remediation of identified vulnerabilities.

3. SIEM Integration & • Security Monitoring
- Forward security telemetry from IRE infrastructure, platform, and application log sources to the BCBS MN SIEM platform.
- Configure and validate security logging, monitoring, and alerting integrations.
- Ensure endpoint detection and response (EDR) and workload protection are deployed and active across recovered servers, containers, and cloud workloads.
- Validate vulnerability management and Cloud Security Posture Management (CSPM) tool visibility into the IRE.
- Support security incident investigation, audit readiness, and compliance requirements.

4.

Recovery

Environment &

• Stakeholder Collaboration
- Own the network isolation setup and associated implementation activities.
- Support policy definition and security controls reviews in collaboration with the BCBS MN team.
- Document network architecture, routing configurations, firewall rules, security controls, and recovery access procedures.
- Participate in technical reviews, testing, validation, and recovery-readiness exercises.
- Coordinate with cloud infrastructure, cybersecurity, application, and business continuity teams.

Required Technical SkillsPrimary Skills — AWS Network Engineering

- AWS networking and cloud infrastructure
- Transit Gateway (TGW), attachments, and route table configuration
- VPC architecture, routing, and network segmentation
- Route 53 public and private hosted zones




- FortiGate firewall configuration and management
- Network isolation, perimeter ACLs, and secure remote access
- Break-glass access design and implementation

Secondary Skills — Cloud Security Engineering

- AWS Security Groups and Network ACLs (NACLs)
- Egress filtering and security guardrails
- Cloud security architecture and workload isolation
- SIEM integration and security log forwarding
- Endpoint Detection and Response (EDR)
- Cloud Security Posture Management (CSPM)
- Vulnerability management and security monitoring
- Security controls validation and compliance

Experience & Qualifications
- Minimum 8+ years of experience in AWS networking and cloud security engineering.
- Strong hands-on experience with AWS Transit Gateway, VPC routing, Route 53, and FortiGate.
- Experience designing network isolation and segmentation for critical or regulated workloads.
- Practical experience integrating cloud infrastructure and application logs with SIEM platforms.
- Experience validating endpoint protection, workload security, vulnerability management, and CSPM coverage.
- Strong troubleshooting, documentation, stakeholder management, and security review skills.
- Experience with disaster recovery, cyber recovery, business continuity, or isolated recovery environments is an advantage.

Candidate Expectations
- Notice Period: Immediate joiners preferred; maximum 30 days.
- Budget: Up to ₹30 LPA maximum.
- Location: PAN India.
- Must be comfortable with hands-on implementation, security validation, and cross-functional collaboration.

Ideal Candidate Profile
- A hands-on AWS Network / Security Engineer who can independently design and implement isolated recovery networking, configure FortiGate and AWS routing components, enforce security guardrails, and validate SIEM, EDR, CSPM, and vulnerability-management coverage for a secure recovery environment.

📌 AWS Sr Network/Security Engineer (8-12yr) (Bengaluru)
🏢 Nasugroup.com
📍 Bengaluru